Zero-click spyware delivered through ads

A link about sandboxing firefox in VM's here https://catonmat.net/what-is-a-sandboxed-firefox . Probably focused on linux, but similar kinds of things probably apply on freebsd. Running in a VM or a jail on freebsd should be similar. A quick web search finds lots of links on various techniques for sandboxing browsers.

Of course it all depends how good the attacker is. If it's some rogue AI thing, perhaps it can hack its way out of a sandbox and still get to the host system, like some of the 'escaped' AI's we've heard about recently.
 
ptx said:
That could probably be sandboxed with Capsicum though.
Click to expand...
Well, Chrome on Linux has lots of sandboxing. But we turn that off to run on FreeBSD.

Chromium also doesn't take FreeBSD patches, so maintenance would be a nightmare.

Firefox - I don't know how far they take security frameworks.
 
Anyone recommend a solid FreeBSD jails tutorial for simple way of running GUI browser?

What browser are people using in FreeBSD that has a nice balance of security, privacy and functionality?
 
I have posted about my sandboxing script for FreeBSD here:

T

Thread 'A simple sandboxing script for FreeBSD'

I wrote a very simple script to setup chroot sandboxes for running applications or development tools in FreeBSD:

https://fossil.tobykurien.com/freebsd-sandbox

This script creates a sandbox per directory, allowing you to run untrusted code while preventing access to your home directory. No setup or configuration needed, just cd into a directory and run "sandbox.sh". Also perfect for creating dev environments, simply add a "packages.pkg" file with the packages you need for your project, run "sandbox.sh" and voila! A sandbox with the packages you want installed, just inside your...
  • Like
  • Thanks

It creates a jail and makes some concessions to allow X11 apps to run just fine inside the jail, so to sandbox Firefox, for example, I simply create a folder for my profile, e.g. ~/webapps/default or ~/webapps/telegram, then cd into the folder and run `sandbox.sh firefox`. The linked repo has more details.
 
You must log in or register to reply here.
Back
Top