Hacker News Reader

I would put virtual or filesystem abstractions in a different category than sandboxing, which puts restrictions over the virtual or native implementations.

View on HN

I mean that's a fair distinction. There's definitely some overlap depending on needs though.

Reply on news.ycombinator.com