Have you ever bothered to read the chromium source code? It's literally just manually written C/Cpp with IF checks for what platform you are on all over the place. Giant monolithic 4000 line files all over the place. But at the end of the day they assign people who are extremely good at architecture to work on different aspects of the browser. Whatever "security architecture" you are imagining is most likely a very custom written component specifically for Chrome that has baked in special sauce for ChromeOS and other Google things. You can't just port it. But Microsoft should really have assigned a high level architect with a background in security to run this project. What a shit show.

If I tell my local jail broken LLM to work on using this exploit for your specific distro how confident are you that it won't hack it after a few hours of effort?

Immutable distros still have writable parts of the disk.

typically the setup is /usr or the base OS image: read-only / atomically updated /etc: often writable or layered /var: writable /home: writable /tmp: writable
containers / flatpaks / app data: writable

and then on top of that you'll still have all of these places where something can put binaries, steal credentials, and hide itself across restarts on your perfect immutable machine /home/ /var/tmp /tmp /var/lib/ /var/cache/ /var/log/
container writable layers
upload directories
SQLite/db files
app config/state
user-level systemd/OpenRC/autostart equivalents
browser/profile dirs
SSH config/keys if permissions allow

and that's just desktop workstations. on the server side you've got whatever http(s) server dejour of the day running threads through whatever fcgi nonsense

and then on a modern corp setup you've got people flying around with claude and codex and therefor npm nonsense flying around everywhere and random node binaries in ps aux compiling random shit

Look it helps and most immutable distros are so eccentric no one bothers to try to exploit them for realsies but don't expect to be safe until you patch your kernel.

The only guy that yaps all day on /. is you. On every thread. Literally. What percentage of your advice is actually coherent? Your mental illness is showing.

This isn't correct. Immutability won't save you here.

These idiots are a dime a dozen in the industry. They come in to any problem and pretend they are smarter than everyone in the room but it turns out they are just proudly ignorant.

gweihir is the classic retired loser sitting on /. literally all day talking shit and never doing any real work. Guy is gonna get pwned by a single unrelated npm package in a couple months and act like it's everyone else's fault.

Why are you even here? Your advice is worth less than nothing.

I've got hundreds of servers to secure with thousand of users and you're over here talking about one machine like your advice isn't literally worthless.

The HSR admin already paid for a 1 mile chunk of rail in downtown LA at one of the new stations so technically it has paid for track.

The population of California is 10 times that.

Franky they don't spend enough money on it. Should be quadruple.

They're not actually spending the money fast enough and it's causing it to grow due to interest but every headline is saying how the project is gonna cost more not realizing the already allocated funds are sitting in a bank accumulating interest.

On top of that the bridges they've been building are over existing rail and roads infrastructure. A big chunk of the HSR path is shared with other train lines already in operating so a lot of the new infrastructure is over this existing rail.

Per California resident it comes out to about $2 per month

231 billion divided by 40 million residents is only $5150 per person. Of which only $200 has actually been spent.

What is it with old people complaining about pennies while their lord and savior runs up the deficit by trillions. Oh right paying for trains is too expensive but paying interest on federal loans is thank you daddy spank me more.

This is done to prevent the parking wars that go on in other major American cities on the east coast and it does work.