Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft open-sources LiteBox, a security-focused library OS

github.com

Post reply on HN
Print view View original

31–40 of 239 posts

Re: Microsoft open-sources LiteBox, a security-focused library OS

#31

Post by marklar423 »

sscarduzio wrote: post #15

Can it replace Wine to run Windows apps on Linux?

IIUC, if you have the source you can recompile said Windows app with LiteBox to statically link in the Windows OS kernel dependencies, so it'll run on any compatible processor regardless of OS (since it won't be making syscalls anymore). It's a unikernel basically.

That's the theory, but I don't know how far LiteBox is along to supporting that workflow.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#32

Post by digiown »

loufe wrote: post #27

The lack of integrated sandboxing in windows compared to android/iphone is still frankly unacceptable. I've become increasingly paranoid about running any application on Windows (not that your average linux distro is even remotely better) and yet Apple and Google seem to be far, far ahead in user permissions (especially with GrapheneOS, god bless that team) and isolation of processes. Consumers and businesses deserve…

The sandboxing on mobile platforms puts the OS vendor in a special position to enforce a monopoly on apps and features. Apple enforces it aggressively, while Google only reluctantly so far. It also prevents the user from exerting full control of the system. Apple does it by locking things down directly, while Google punishes you for owning your devices with attestation.

There has to be a better way. I think Linux's flatpak is a reasonable approach here, although the execution might be rather poor. I want a basic set of trusted tool that I can do anything with, and run less trusted tools like GUI programs in sandboxes with limited filesystem access.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#33

Post by joe_mamba »

TkTech wrote: post #30
joe_mamba wrote: post #25

Earlier quoted context omitted.

>Kernel and low level stuff are actually very stable and good. This. A while ago a build of Win 11 was shared/leaked that was tailored for the Chinese government called "Windows G" and it had all the ads, games, telemetry, anti-malware and other bullshit removed and it flew on 4GB RAM. So Microsoft CAN DO IT, if they actually want to, they just don't want to for users. You can get something similar yourself at home r…

Is this not just Windows LTSB/LTSC? Which has been a thing forever.

Maybe, could also be that for a 9 figure government contract they'll provide a custom LTSC branch just for you with only the features you want.

Re: Microsoft open-sources LiteBox, a security-focused library OS

#38

Post by portly »

RoyTyrell wrote: post #14
PunchyHamster wrote: post #12

[flagged]

Just assume the only thing a human did was name write the initial prompt.

I read this type of (sour) comment more and more on this forum. To me it reads very cynical and I wonder what the author is trying to say with this. Are you perhaps negatively impacted by automatic coding?

Re: Microsoft open-sources LiteBox, a security-focused library OS

#40

Post by charles_f »

gdevenyi wrote: post #34

What is a 'library OS'?

I think that's an OS in the form of a library, like Wine for example. From what I get from the description it allows you to run programs on your real OS and make it see a cut down API to your actual system to reduce the attack surface.
Post reply on HN