Get the latest tech news
Syd the perhaps most sophisticated sandbox for Linux
Note: First parts of this course are an overview of security related problems. Later we refine, are "zooming into" the details. The Chrome Browser nightmare The secret source that made Amazon #1 in the world - The "Stuffer Concept" Is Rust a safe language? The F* formally veri...
There comes an inherent security risk of all kinds of stack/heap overflows, "use after free" (see above), "code injection" and other exploiting methods with it. Note: Syd also is verifying checksums of the binary itself, its dynamic libraries loaded and even the environment variables (mitigating the famous LD_PRELOAD "Linker Hijacking" tricks) are checked before it is starting it up: Syd strictly resticts access to e.g./proc/self/mem* so can mitigate a couple of attacks, e.g. the famous "Dirty Cow" exploit:
Or read this on Hacker News