Reply to thread

Message

<blockquote data-quote="Vitali Ortzi" data-source="post: 1109012" data-attributes="member: 57714">On windows hitmanpro.alert uses SGX&nbsp; as a Trusted Execution Environment to protect&nbsp; the jit compiler&nbsp; wich is more efficient method then V8 sandbox google is using&nbsp; since it&#039;s hardware basedso you can harden the jit compiler with SGX for Linux or use V8 sandboxAbout sandboxing whole chromium from the system you can either use bubblewrap or selinuxUnlike consumer distros big companies should have not just further sandboxing then consumer distros but have more exploit mitigations just like windows , Mac , android , chrome wich should force an attacker in most causes to have extra bugs in the exploit chain to escape the sandboxing layers and gain privileges but these are usually depending if he uses memory based exploits as mitigations are primally made against memory based exploitationBut some hackers are just too good like qwertyoruiop who I remember years ago jailbroken the latest iOS at that time without using a single memory corruption based overflow to get root privilegesas long as you aren&#039;t hunted by some actual professional hacker then you shouldn&#039;t need to further sandbox&nbsp; vectors like browsers other then what fedora does by default and chrome does by defaultMost likely malware will get in your system by some malicious git repository you have used and not from exploitation of the browser as thats targeted only by advanced apt</blockquote>

[QUOTE="Vitali Ortzi, post: 1109012, member: 57714"] On windows hitmanpro.alert uses SGX as a Trusted Execution Environment to protect the jit compiler wich is more efficient method then V8 sandbox google is using since it's hardware based so you can harden the jit compiler with SGX for Linux or use V8 sandbox About sandboxing whole chromium from the system you can either use bubblewrap or selinux Unlike consumer distros big companies should have not just further sandboxing then consumer distros but have more exploit mitigations just like windows , Mac , android , chrome wich should force an attacker in most causes to have extra bugs in the exploit chain to escape the sandboxing layers and gain privileges but these are usually depending if he uses memory based exploits as mitigations are primally made against memory based exploitation But some hackers are just too good like qwertyoruiop who I remember years ago jailbroken the latest iOS at that time without using a single memory corruption based overflow to get root privileges as long as you aren't hunted by some actual professional hacker then you shouldn't need to further sandbox vectors like browsers other then what fedora does by default and chrome does by default Most likely malware will get in your system by some malicious git repository you have used and not from exploitation of the browser as thats targeted only by advanced apt [/QUOTE]

Verification