[paranoidone]

@jggimi

You mentioned chromium. This application has been ported to use pledge() and unveil(). So this particular browser is prevented from performance system calls outside of a restricted set, and it is storage-isolated.

YES, this is what I meant by sandboxing.

Thanks for the explanation of what VMM does. That clears up the misunderstanding.

If you're interested in Flash, you've come to the wrong OS.

I do not want to create flash content, just view youtube videos and there is code for that according the faq on openbsd. My focus is security not convenience so if I absolutely need a windows only app like Skype, then I may keep a second laptop for that purpose or create a dual boot machine.