Top all-time · #14245
bress.net
Personal blog · bress.net/blogsystemsprogramming
bress.net is a personal blog at bress.net about systems and programming. Since 2010, 5 different Hacker News readers have linked it 7 times, most often “How Long Does a Flash Drive Last?”. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link bress.net's post on running Firefox in a Red Hat/Fedora SELinux sandbox, citing it for limiting which ports a browser exploit can reach and for the sandbox command.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /blog/archives/195-Firefox-in-a-sandbox-with-Fedora.html2 people · 4 mentions · first linked 2015-08-07
- How Long Does a Flash Drive Last?2 people · 2 mentions · first linked 2010-10-25
What Hacker News says?
Running your browser in Red Hat's SELinux sandbox [1] [2] limits the ports you can connect to and thus limits this type of attack to those ports (80, 81, 443, 488, 8008, 8009, 8443, and 9000 in the default configuration). [1] http://danwalsh.livejournal.com/31146.html [2] http://www.bress.net/blog/archives/195-Firefox-in-a-sandbox-...
Comment linking /blog/archives/195-Firefox-in-a-sandbox-with-Fedora.html
on “How to steal a developer's local database”Submitted How Long Does a Flash Drive Last? as a story · 95 points
HN discussionI've run Firefox in a Red Hat/Fedora SELinux sandbox [1] [2] for the past 5 years or so. It is a little more tedious for things such as file uploads/downloads and cut-and-paste -- but worth it, IMHO. [1] http://danwalsh.livejournal.com/31146.html [2] http://www.bress.net/blog/archives/195-Firefox-in-a-sandbox-...
Comment linking /blog/archives/195-Firefox-in-a-sandbox-with-Fedora.html
on “Firefox exploit found in the wild”Submitted How Long Does a Flash Drive Last (2008) as a story · 2 points
HN discussionYou can use selinux for that. In Fedora there is an application called sandbox that help you with that e.g. see http://www.bress.net/blog/archives/195-Firefox-in-a-sandbox-...
Comment linking /blog/archives/195-Firefox-in-a-sandbox-with-Fedora.html
on “Firefox Under Fire: Anatomy of latest 0-day attack”Submitted Is Linus' Law real? as a story · 1 points
HN discussionFedora and Red Hat (+ the Red Hat clones like CentOS) have a "sandbox" command which uses SELinux to sandbox applications or entire X sessions and the applications inside them. For more info see [1] [2]. I've used it for a long time and it works well enough. It's not available in Ubuntu, though. In Ubuntu the closest thing to it, I think, is AppArmor, but I've never tried it myself. Or you could run a virtual machin…
Comment linking /blog/archives/195-Firefox-in-a-sandbox-with-Fedora.html
on “Ask HN: Best Linux sandbox?”