On: Porting Firefox to Apple Silicon

[2Gkashmiri]

how do you "secure" machines if they are windows ones and dumb people plugin flash drives and click on big shiny download ram buttons. genuinely curious.

[icebraining → 2Gkashmiri]

One way to do it is to whitelist all binaries in the system, and sandbox all applications (to prevent chances of a malicious PDF/image/etc abusing a buggy application).

[2Gkashmiri → icebraining]

can you do that on windows? every single exe, every process?

[icebraining → 2Gkashmiri]

Yeah, the security policies let you do that. I think the current mechanism is called AppLocker.

Note that there may be still ways to bypass it if you're an attacker sitting at the computer, rather than a hapless user.