min VS chromium

Min Browser if i remember correctly.

Here is link number 1 - Previous text "MIN"

test out MIN... it's based on Chromium/Blink using the Electron/Node.js framework. It's judicious in resource-usage, but the layout is way too minimal for me, and the build-in adblocker is mehhh...

So, basically, Min. Hope you update more often than they do. It might just be bad habit from regular browser updates, but 2 months without update is just weird.

Maybe MinBrowser or Web ...

it's called Min

funny short story: i didn't like Microsoft Edge interface for the screenshot so i googled "minimal browser" and then i found Min, and it's actually pretty nice!

Chromium's sandboxing code, design documents, etc. are a good read for one of the most widely deployed and battle tested windows sandboxes, and is presumably BSD 3-Clause "New"/"Revised" Licensed like the rest of Chromium:

https://github.com/chromium/chromium/blob/main/docs/design/s...

https://github.com/chromium/chromium/tree/main/sandbox/win/s...

https://github.com/chromium/chromium/tree/main/sandbox

Chromium's unveil equivalent on windows is to:

1. Have an "unsandboxed" broker/parent process that implements unveil-like logic for whitelisting files.

2. Have the sandboxed child process run under a heavily restricted access token that blocks "all" file I/O (except, null security FAT32 mounts are sadly still accessible).

3. Intercept/patch Win32 API calls to request whitelisted things via IPC with the broker process that would otherwise be blocked by the restricted access token.

Bazel/Make are in slightly trickier situations, in that they run third party binaries - which might require shenannigans involving injecting DLLs, or creating patched EXEs, to do the intercepting/patching of `CreateFile` etc.

How does carbon have any intersection with Google Chrome / Chromium development? Some earlier posts:

- https://chromium.googlesource.com/chromium/src/+/refs/heads/...

- https://security.googleblog.com/2021/09/an-update-on-memory-...

Would carbon be a variation of "making C++ safer" mentioned in that blog post?

it's spyware doesn't mean it's not open source bruh https://github.com/chromium/chromium

> Maybe rust devs could end wishing that things were written in rust and start writing things in rust

They are, though. Like, I don't even disagree with the cost of rewriting, but there are very much active efforts to rewrite things in rust (ex. coreutils - https://github.com/uutils/coreutils , OS - https://www.redox-os.org/ ) or to add rust to existing projects (Linux, Firefox and Chrome both (https://chromium.googlesource.com/chromium/src/+/refs/heads/...)).

Microsoft Edge is open-source. You can find most of it source code under the Chromium Project, The reminder is available from Microsoft.

If we only consider OSS projects that are not prominently backed in by companies (e.g. Google with Chromium, Facebook with React), and only really driven by distributed individuals coming together to maintain something beautiful, what do you think the best examples would be?

Maybe for some projects, but Google most definitely uses Git (all Google projects).