Hacker News Reader

I expect my PDF reader to be secure. If the PDF format is too complex to implement safely then the renderer should be sandboxed in the reader itself instead of preventing me from scripting using xdotool and similar.

And unless you fully sandbox your PDF reader then an exploit is going to have access to your user directory without any display server involvement anyway. X11 vs. Wayland doesn't even come into the picture.

View on HN

It shouldn’t complicate the program itself, everything should be sandboxed by default.

And they should simply not have access to my home folder, it should be given access to a specific file only it is about to read.

That severy limits the usability and even functionality that programs can implement. If you want a phone os then go use one but don't make Desktop Linux into one.

Reply on news.ycombinator.com