5 ms·

Starting and stopping a video is an interactive action. Even a drop down menu is interactive. Arbitrary interactivity may not be possible, but I think that is t

by madez 9y ago

Starting and stopping a video is an interactive action. Even a drop down menu is interactive. Arbitrary interactivity may not be possible, but I think that is totally acceptable for what we are talking about: remotly delivered, unaccounted, unreviewed and directly and automatically executed code. That the local and native programs are not as good as the browser-based abominations is no argument for that technology; there are reasons for the businesses to choose this way despite (or because) how bad it is for users. Code that comes for example from a distribution is signed and maintained by someone I can easily identify. It is looked at by more than the author. I can track the path of the code backwards, if something nefarious happens. That justifies trust in that code. The comparison of that code with the JavaScript sandbox is invalid, it's to be compared with the delivered JavaScript. There is no reason why even trustably delivered code shouldn't be sandboxed. The comparison of that sandbox with the JavaScript sandbox would be apt. I agree that sandboxing is important, even for local programs.

kentonv 9y ago
OK, I'm glad we agree that native apps ought to be sandboxed too. Unfortunately no major desktop OS does a good job of this yet, which is why, realistically, today, choosing web apps over native apps actually makes your system more secure. Maybe that wouldn't be true in an ideal world where desktop apps were sandboxed as heavily as web apps. But you're still in denial about the fact that web app delivery is hugely valuable to a lot of people (yes, to users). This isn't even remotely debatable. SaaS is now a $100B/yr industry and growing rapidly. People wouldn't be rapidly replacing locally-installed apps with SaaS if they didn't really want it. You really can't just proclaim that everyone should give all that up based on your ideology about how software "should" be delivered.
- madez 9y ago
  I think we don't contradict each other necessarily. JavaScript applications not delivered by websites but through the package manager would be okay for me. We would have the sandbox on one side and the accounting and responsibility on the other side. After all, even the JavaScript sandbox (FireFox) itself is delivered how I think software should be delivered. The size of the market is no argument. Supply drives demand. I don't simply proclaim how things should be done. I point out problems, criticize the status quo based on sound facts, and point to better solutions. What else do you suggest?
  - kentonv 9y ago
    > Supply drives demand. There's no shortage of supply of desktop apps, yet web apps are gaining ground rapidly. This indicates that people prefer web apps for some reason. > What else do you suggest? Build it. If you truly have a solution that is better for users, then you can make a lot of money if you bring it to market. Then you not only prove you were right, but you make the world a better place and get rich in the process. :) But somehow you're going to need to make desktop apps significantly better than they are today. You won't win by telling users that their preferences are wrong, you win by giving them something better.

by madez 9y ago

kentonv 9y ago

OK, I'm glad we agree that native apps ought to be sandboxed too. Unfortunately no major desktop OS does a good job of this yet, which is why, realistically, today, choosing web apps over native apps actually makes your system more secure. Maybe that wouldn't be true in an ideal world where desktop apps were sandboxed as heavily as web apps. But you're still in denial about the fact that web app delivery is hugely valuable to a lot of people (yes, to users). This isn't even remotely debatable. SaaS is now a $100B/yr industry and growing rapidly. People wouldn't be rapidly replacing locally-installed apps with SaaS if they didn't really want it. You really can't just proclaim that everyone should give all that up based on your ideology about how software "should" be delivered.

madez 9y ago
I think we don't contradict each other necessarily. JavaScript applications not delivered by websites but through the package manager would be okay for me. We would have the sandbox on one side and the accounting and responsibility on the other side. After all, even the JavaScript sandbox (FireFox) itself is delivered how I think software should be delivered. The size of the market is no argument. Supply drives demand. I don't simply proclaim how things should be done. I point out problems, criticize the status quo based on sound facts, and point to better solutions. What else do you suggest?
- kentonv 9y ago
  > Supply drives demand. There's no shortage of supply of desktop apps, yet web apps are gaining ground rapidly. This indicates that people prefer web apps for some reason. > What else do you suggest? Build it. If you truly have a solution that is better for users, then you can make a lot of money if you bring it to market. Then you not only prove you were right, but you make the world a better place and get rich in the process. :) But somehow you're going to need to make desktop apps significantly better than they are today. You won't win by telling users that their preferences are wrong, you win by giving them something better.