3 ms·

I haven't used UAC, so I can't comment about it, but permissions on iOS work fine. I'm asked only once, usually the first time I use an app, or access certain f

• johncolanduoni 10y ago
  Yes, but there's no broad "catch all" permission, and the permissions are things every user will understand (e.g. access contacts). Additionally you don't have the option to pretend your app is older than it is and bypass permissions altogether. Your proposal is very different from the iOS model.
  • kartickv 10y ago
    Broadly, my proposal is the iOS model + a catch all permission. Apps that try to bypass permissions are treated the same as apps that request unrestricted permission. You're right that the permission prompts need to be expressed in an understandable way. For example, don't ask "Do you want to allow Skype to open TCP port 800?", which sounds like gobbledygook to non-technical users. Instead ask, "Do you want to allow Skype to expose your device on the Internet?" or something along those lines. Or maybe skip this prompt, since if Skype is sandboxed, the danger of opening a port is reduced. Basically, make an intelligent tradeoff between security and usability. You're right that it will be harder for users to understand than iOS, but it's still better than the "anything can happen?" status quo.