#compartmentalisation — Public Fediverse posts

The recording (and transcript, for the sensible people who don't want to listen to me speaking) of my March QCon talk is online!

If you want to understand how CHERI works and the relationship between memory safety and compartmentalisation, and why starting from a programmer model is essential if you want to build useful hardware, here you go!

#CHERI #CHERIoT #QCon #Compartmentalisation #MemorySafety

New post on ByteArchitect: Hardening macOS pt.3 — Browsers

Your browser is the biggest attack surface on your machine. We harden Safari and Firefox, introduce browser compartmentalisation, and discover an uncomfortable truth: the more you harden, the more you stand out.

The hardening paradox, explained with data.

https://bytearchitect.io/macos-security/Hardening-macOS-pt.3-Browsers/?utm_source=mastodon&utm_medium=social&utm_campaign=hardening-pt3

#macOS #privacy #infosec #browsers #hardening #firefox #safari #compartmentalisation

• unmigrated accounts on legacy browser—such as #Safari
• pro liaison on a browser approved by your organization
• consuming, online streaming, on the all-purpose browser: #Firefox (then Settings > Privacy)
• social media on a speedy browser—such as #unGoogled (but you must update)
• online banking, health, sysadmin & sensitive stuff on a hardened browser—such as #LibreWolf or #Mullvad's browser

#privacy #browsers #compartmentalisation #compartmentalization #safety #security #diversity #infoSec

Many #browsers mainly are data collection tools for advertising companies.
You can assume that everything you do through #Chrome or #Safari is collected, saved to your data profile, and used for targeted advertising. Your data is shared between browsers only if you are "signed in" to the same account. So you should use different browsers for different online activities.
The practice is called #compartmentalisation.

For example: 👇🏾