Birbla

How to deal with security implications of running/installing projects?

How to deal with security implications of running/installing projects?

8 pointsby johng7 comments

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • I assume that if it's not air-gapped, it's compromised. I keep important stuff offline.
    by afpx
  • Small and cheap cloud VM, preferably on a separate account used for this purpose specifically.
    by taleodor
  • Have you tried VirtualBox? That’s my go-to for running un-trusted code. Start with a clean VM/fresh install, and don’t put any secrets in it.
    by ebcode
  • https://dl.acm.org/doi/10.1145/358198.358210
    by gabrielsroka
  • A simple qemu virtual machine is nice and quick to spin up. I mainly work inside an openbsd or linux virtual machine. I use a different vm for each project and I have a "sandbox" vm I use to run random things I download/test.
    by bitbasher
  • Have you considered Qubes OS, https://qubes-os.org? It is more secure than Xen, which it relies on, https://www.qubes-os.org/security/xsa/#statistics.
    by fsflover

Explore Birbla archives