mixedbit releases Drop sandbox tool on Hacker News
1Sep 22 9:52 AM · 1d ago · 1 article · 1 post · 2 sources · development 1 of 5
Developer introduces Drop, a rootless Linux sandbox supporting gVisor, created to mitigate risks of installing third-party programs. The motivation stems from concern that a single compromised dependency could compromise the entire system and potentially all users of software shipped from that machine.
“I created Drop because I always felt uneasy installing and running third-party programs using my main user account. A single compromised dependency means a full compromise of the system.”