It sounds like you're describing snap packages. Is that accurate? That mostly wo... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

Kalium on Dec 4, 2019 | parent | context | favorite | on: Two malicious Python libraries caught stealing SSH...

It sounds like you're describing snap packages. Is that accurate?

That mostly works for whole applications. I'm not sure how to apply it to libraries for developers though. Especially ones that would get installed in userspace, like these python packages.

staticassertion on Dec 4, 2019 [–]

I'm not super familiar with snap, my weak understanding is that it makes for a very poor isolation boundary.

Kalium on Dec 4, 2019 | [–]

Yup, in large part because users expect things to work across the boundary.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact