A parser processing an unfamiliar binary is part of the attack surface. Putting it in a subprocess does not, by itself, hide a home directory, remove network access or constrain every child process. A
Markdown supported · ⌘↵ to post
No responses yet.