Software security engineer. Main account: @EtiennePerot

4096R/5CFC3B88974EE250
Joined September 2007
I will be open-sourcing a project that should massively help with Linux desktop security in the coming weeks. No, it is not just an AppArmor clone. Not a KVM frontend either. But a third, more complex third thing. Presenting to Qubes devs next week!
the recent signal debate points out something important: desktop OS security is far behind mobile. there have been incremental developments to improve this situation: QubesOS, OpenBSD's unveil/pledge syscalls, and macOS's incremental development towards something like unveil/pledge
1
2
130
A sneak peek at what I've been working on to help with this very problem. xitter.cf/zooko/status/180977104…
People have the entirely reasonable expectation that desktop operating systems like Windows, MacOS, and Linux should prevent one app from stealing another app’s data. But they don’t. If you want that kind of security, you need to use a mobile phone OS or Chromebook.
1
1
87
The solution involves gVisor, an open-source reimplementation of Linux as a userspace Go application. It works well enough to run modern browsers and play YouTube at 1080p 60fps without a sweat, and less memory overhead than a full VM. More to come soon. @dystopiabreaker @zooko
55
DamnVid got Lifehacker'd, thankfully it's not hosted on my own shared hosting account... The download count is now over nine thousand!
DamnVid out of beta, version 1.0 released! http://ping.fm/idMaH It's a v1 for once.
1
DamnVid 0.3 released, this time with Windows and Ubuntu/other Linux distros support! http://ping.fm/e4yE7
An idea that could make a cool web service: Synchronous video (online or local) watching between computers (friends) with real-time comments