Live data from Hacker News

Microsoft open-sources LiteBox, a security-focused library OS

github.com

111–120 of 239 posts

Re: Microsoft open-sources LiteBox, a security-focused library OS

#111
post #90

Earlier quoted context omitted.

Microsoft employ over 100,000 engineers. I'd advise against assuming that everything produced by any of them is bad because of bugs in Windows.

The criticism was directed at the company's product, not the employees...

The response appears to be pointing out that with so many employees (engineers), it's unlikely that they all work on Windows.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#112
post #90

With how buggy their flagship OS has become, why would I trust anything else they release to be better? Or even if it does work well now, why should I expect it to stay that way? Microsoft has burned through all possible goodwill at this point, at least for me.

Microsoft employ over 100,000 engineers. I'd advise against assuming that everything produced by any of them is bad because of bugs in Windows.

[deleted]

Re: Microsoft open-sources LiteBox, a security-focused library OS

#113
post #23

Earlier quoted context omitted.

UI of Windows is buggy and inconsistent. Kernel and low level stuff are actually very stable and good.

>Kernel and low level stuff are actually very stable and good. This. A while ago a build of Win 11 was shared/leaked that was tailored for the Chinese government called "Windows G" and it had all the ads, games, telemetry, anti-malware and other bullshit removed and it flew on 4GB RAM. So Microsoft CAN DO IT, if they actually want to, they just don't want to for users. You can get something similar yourself at home r…

Something similar, or indeed, exactly the same:

https://www.windowscentral.com/software-apps/windows-11/leak...

Re: Microsoft open-sources LiteBox, a security-focused library OS

#114
post #67

Earlier quoted context omitted.

Talked about back in the Vista days publicly (I cannot find the articles now) - Microsoft has commitments to their hardware partners to help keep the hardware market from collapsing. So they are not incentivized to keep Win32_Lean_N_Mean, but instead to put up artificial limits on how old of hardware can run W11. I have no insider knowledge here, just this is a thing which get talked about around major Windows releas…

>Microsoft has commitments to their hardware partners to help keep the hardware market from collapsing. Citation needed since that makes no logical sense. You want to sell your SW product to the most common denominator to increase your sales, not to a market of HW that people don't yet have. Sounds like FUD. >but instead to put up artificial limits on how old of hardware can run W11 They're not artificial. POPCNT / S…

Windows 11 is running on my ThinkPad T530. Its CPU is very nearly 14 years old.

What is missing here that was present when this same computer was running Windows 10?

Re: Microsoft open-sources LiteBox, a security-focused library OS

#115

Copilot https://github.com/microsoft/litebox/blob/main/.github/copil...

> Extremely simple changes do not require explicit unit tests. I haven't used Copilot much, because people keep saying how bad it is, but generally if you add escape hatches like this without hard requirements of when the LLM can take them, they won't follow that rule in a intuitive way most of the time.

Yeah, I tried various very sane-looking instrucions file when starting to use copilot 6 months ago. Turned out it was not really useful. It mostly follows the rules anyway, but it also often forgot to. So turns out, especially with the fast turnaround with models today, it was better to just forego these instructions files.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#116
post #74

Earlier quoted context omitted.

>Kernel and low level stuff are actually very stable and good. This. A while ago a build of Win 11 was shared/leaked that was tailored for the Chinese government called "Windows G" and it had all the ads, games, telemetry, anti-malware and other bullshit removed and it flew on 4GB RAM. So Microsoft CAN DO IT, if they actually want to, they just don't want to for users. You can get something similar yourself at home r…

Never heard of Windows G .. that sounds exactly what I want for my older Thinkpads :-)

I've been starting with Tiny11 and then running the debloat scripts against it. Reduces the memory footprint to about 2GB and have found zero compatibility problems with doing this. You just have to use curl or something to download a browser because you won't even have Edge.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#117
post #114

Earlier quoted context omitted.

>Microsoft has commitments to their hardware partners to help keep the hardware market from collapsing. Citation needed since that makes no logical sense. You want to sell your SW product to the most common denominator to increase your sales, not to a market of HW that people don't yet have. Sounds like FUD. >but instead to put up artificial limits on how old of hardware can run W11 They're not artificial. POPCNT / S…

Windows 11 is running on my ThinkPad T530. Its CPU is very nearly 14 years old. What is missing here that was present when this same computer was running Windows 10?

>Windows 11 is running on my ThinkPad T530. Its CPU is very nearly 14 years old.

Yes, you can bypass HW checks to install it on a pentium 4 if you want, nothing new here.

>What is missing here that was present when this same computer was running Windows 10?

All the security features I listed in the comment above.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#118
post #23

Earlier quoted context omitted.

UI of Windows is buggy and inconsistent. Kernel and low level stuff are actually very stable and good.

>Kernel and low level stuff are actually very stable and good. This. A while ago a build of Win 11 was shared/leaked that was tailored for the Chinese government called "Windows G" and it had all the ads, games, telemetry, anti-malware and other bullshit removed and it flew on 4GB RAM. So Microsoft CAN DO IT, if they actually want to, they just don't want to for users. You can get something similar yourself at home r…

Microsoft should just open source Windows at this point.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#119
post #27

The lack of integrated sandboxing in windows compared to android/iphone is still frankly unacceptable. I've become increasingly paranoid about running any application on Windows (not that your average linux distro is even remotely better) and yet Apple and Google seem to be far, far ahead in user permissions (especially with GrapheneOS, god bless that team) and isolation of processes. Consumers and businesses deserve…

> I've become increasingly paranoid about running any application on Windows (not that your average linux distro is even remotely better) Linux excels over Windows in the area of security by a wide margin, I have no qualms about running an app on Linux versus Windows, any day of the week.

> Linux excels over Windows in the area of security by a wide margin

No, this is wrong but might be true if you are talking about Linux package manager vs. Random Windows .exe on internet. But if you are talking about Secure Boot, encrypted disk, sudo etc. Windows is more secure but it looks like https://amutable.com/ will make Linux more secure like Windows.

Edit: Some insecure things on Linux: Dbus (kwallet etc.), sudo, fprint, "secure boot".

Re: Microsoft open-sources LiteBox, a security-focused library OS

#120
post #2

From the GitHub page: LiteBox is a sandboxing library OS that drastically cuts down the interface to the host, thereby reducing attack surface. It focuses on easy interop of various "North" shims and "South" platforms. LiteBox is designed for usage in both kernel and non-kernel scenarios. LiteBox exposes a Rust-y nix/rustix-inspired "North" interface when it is provided a Platform interface at its "South". These inte…

is this wslv1.2 (wslv1 redux) in now a more general cross-platform library firewall type thing?
Post reply on HN