Hacker News Reader

Comment by kitsunesoba | Hacker News Reader

Seems like it can be disabled in flags for now, which I just went in and did. That flag is bound to disappear at some point though… might become necessary to wrap browsers in an isolating sandbox or VM just to be sure they can't touch things they're not supposed to.

View on HN

> might become necessary to wrap browsers in an isolating sandbox or VM just to be sure they can't touch things they're not supposed to.

Honestly I view this as a good idea regardless (it also helps contain exploits, in addition to official APIs). On Linux firejail is amazing for this (but also consider bubblewrap and others), and AFAIK sandboxie is a good choice on NT. No idea what sandboxing options are on Darwin - looks like it has something built in?

chrome://flags/#native-file-system-api

I already had it disabled before LOL

It has a policy as well and will always allow you to disable it. No need for hyperbole.

"Will always" is a phrase Google does not know the meaning of.

For filesystem access they are beholden to their enterprise users as well and Chromium still has a lot of open source developers that aren't simply looking out for Google's best interests. If they became overly hostile, then I'm sure we'd see a fork at some point. I'm not saying they are perfect, but a lot of Chromium hate is unfounded and exaggerated.

AMP waves “hello”

AMP isn't specific to Chromium

Reply on news.ycombinator.com