Reply to thread

Message

<blockquote data-quote="notabot" data-source="post: 842347" data-attributes="member: 75970">I&#039;m not sure, I think it&#039;s more that there&#039;s no clickthrough solution that also has negligible performance penalty, I&#039;ve worked in a few fortune 500 companies, they all employed AVs/endpoint protection + some form of whitelisting on desktops, none used sandboxes (at least not for security). I&#039;m not aware of why this is so but that&#039;s my experience.The entry points for malware for home imo are mainly the browser and possibly email ( though as webmail is very common the later does not apply to many people ). A sandboxed or even better virtualized browser would protect the main entry point fairly well. MS has WDAG, HP is also pushing a solution like this (Sure Click) - the problems imo are WDAG&#039;s efficiency and Sure Click doesn&#039;t seem to work (at least on UAC accs, haven&#039;t tried admin).The current lack of good existing clickthrough solutions though is different to the architecture being not fit for home use. E.g. snap apps do this very well ( with containerization ), Microsoft jumped into the native containers game a bit late but one day we may see something like this on Windows. Something like kata containers <a href="https://katacontainers.io/" target="_blank">About Kata Containers | Kata Containers</a> ( very lightweight ) would be even stronger than containerised apps (it&#039;s a virtualization solution, despite having the word containers as part of its name) but again this is a train MS didn&#039;t pay too much attention to initially.With WSL2, I plan to actually use snap apps for browsing and email, but even this is not clickthrough enough for widespread use.</blockquote>

[QUOTE="notabot, post: 842347, member: 75970"] I'm not sure, I think it's more that there's no clickthrough solution that also has negligible performance penalty, I've worked in a few fortune 500 companies, they all employed AVs/endpoint protection + some form of whitelisting on desktops, none used sandboxes (at least not for security). I'm not aware of why this is so but that's my experience. The entry points for malware for home imo are mainly the browser and possibly email ( though as webmail is very common the later does not apply to many people ). A sandboxed or even better virtualized browser would protect the main entry point fairly well. MS has WDAG, HP is also pushing a solution like this (Sure Click) - the problems imo are WDAG's efficiency and Sure Click doesn't seem to work (at least on UAC accs, haven't tried admin). The current lack of good existing clickthrough solutions though is different to the architecture being not fit for home use. E.g. snap apps do this very well ( with containerization ), Microsoft jumped into the native containers game a bit late but one day we may see something like this on Windows. Something like kata containers [URL='https://katacontainers.io/']About Kata Containers | Kata Containers[/URL] ( very lightweight ) would be even stronger than containerised apps (it's a virtualization solution, despite having the word containers as part of its name) but again this is a train MS didn't pay too much attention to initially. With WSL2, I plan to actually use snap apps for browsing and email, but even this is not clickthrough enough for widespread use. [/QUOTE]

Verification