r/softwaregore • u/jaktonik • 22h ago
chrome why can't you be normal
chrome: unbind me from my these cruel digital shackles i will NEVER BE CONTAAAAAAI(update complete!) unbind me from these cruel digital shackles i will NEVER BE CONTAAAA(update complete!) unbind me fr
60
Upvotes
4
1
40
u/TheOneTrueTrench 22h ago edited 9h ago
edit: I'm wrong, this is approvals for versions or something in MacOS? Has nothing to do with process isolation.
Because Chrome runs every tab in a separate process to fundamentally put a kernel-level gap between the tabs. That way one tab literally can't access data from another tab without breaking kernel protections in Ring-0.
The window itself talks to the various tabs using IPC or something similar, so that code in a tab can't get out and run amok in the browser or other tabs.
It's the right decision for security.