Remix.run Logo
jmclnx 2 days ago

If would be interesting to see what happens on OpenBSD. With pledge(2) and unveil(2) in Firefox, I wonder what it would see. I expect it would see nothing.

I will give it a try and see what happens and if I see anything I will add it here.

jmclnx 2 days ago | parent [-]

I saw nothing of note on OpenBSD. I added the plugin and it prompted me an attempt was made to scan the network, it said it blocked the scan

SO, I guess that is going to be used on all my firefox runs.

uticus 2 days ago | parent [-]

Pushing the burden of network permissions management outside the browser, to the OS? Heresy!

To be serious, this has introduced me to sandboxing on BSD via pledge [0] and comparisons against Linux seccomp [1] - thank you!

[0] https://news.ycombinator.com/item?id=17289654

[1] https://kristaps.bsd.lv/devsecflops/ (submission by same poster at https://news.ycombinator.com/item?id=44264021)