4 ms·

You have my upvote, but I imagine that tptacek means that iOS is very very well sandboxed, and has an extremely tight and well authenticated download and update

You have my upvote, but I imagine that tptacek means that iOS is very very well sandboxed, and has an extremely tight and well authenticated download and update system which is extremely difficult for a third party to monkey with. This is security via centralization and trusting a benevolent capitalist dictator. As long as your personal interests are aligned with interests of the benevolent capitalist's shareholders, you should be fine. It is my least favorite security model. But, in the case of iOS it seems to be working well (for now). My long-term hope is for a decentralized FOSS model, but for the time being, in the USA, on a multipurpose machine, the benevolent capitalist dictator beats it, especially on sandboxing and package/app authentication.

tptacek 8y ago
I like open source software as much as most people on HN, and have worked with it for most of my career. But help me understand how a decentralized FOSS model gets ordinary lawyers, reporters, and congressional campaign staffers the level of security that iOS does? What are the mechanisms that assure safety for users? The closest I can come to seeing something like this work is a Chromebook, and Chromebooks are locked-down and get their security model from a central authority.
- RVuRnvbM2e 8y ago
  You're right and this is just the classic walled garden tradeoff - freedom for convenience. Depending who you are, this might be acceptable, and it's good that we have choices.
- _emacsomancer_ 8y ago
  > What are the mechanisms that assure safety for users? What are the mechanisms that assure safety for users of iOS? I understand that it's had a good track record so far, but the proprietary closed nature doesn't inherently inspire trust. Surely a decentralised FOSS model done right could be secure for lawyers &c.
  - fjsolwmv 8y ago
    As the old saying goes, "if you could have invented a secure open source desktop chat app, you would have developed a secure open source desktop chat app." In practice, empirict results win over theoretically optimal designs.
    - confounded 8y ago
      I think that’s unfair; the Ghost.io post from a day or so ago is a good reminder of just how much harder it is to do things when you have to make them work in a decentralized fashion. Decentralization makes everything harder. Doesn’t mean it’s the wrong thing to do! :)
    - _emacsomancer_ 8y ago
      And as the old saying continues, "...so instead you invented a proprietary one, with hidden code, and told everyone it's secure."

tptacek 8y ago

I like open source software as much as most people on HN, and have worked with it for most of my career. But help me understand how a decentralized FOSS model gets ordinary lawyers, reporters, and congressional campaign staffers the level of security that iOS does? What are the mechanisms that assure safety for users? The closest I can come to seeing something like this work is a Chromebook, and Chromebooks are locked-down and get their security model from a central authority.

RVuRnvbM2e 8y ago
You're right and this is just the classic walled garden tradeoff - freedom for convenience. Depending who you are, this might be acceptable, and it's good that we have choices.
_emacsomancer_ 8y ago
> What are the mechanisms that assure safety for users? What are the mechanisms that assure safety for users of iOS? I understand that it's had a good track record so far, but the proprietary closed nature doesn't inherently inspire trust. Surely a decentralised FOSS model done right could be secure for lawyers &c.
- fjsolwmv 8y ago
  As the old saying goes, "if you could have invented a secure open source desktop chat app, you would have developed a secure open source desktop chat app." In practice, empirict results win over theoretically optimal designs.
  - confounded 8y ago
    I think that’s unfair; the Ghost.io post from a day or so ago is a good reminder of just how much harder it is to do things when you have to make them work in a decentralized fashion. Decentralization makes everything harder. Doesn’t mean it’s the wrong thing to do! :)
  - _emacsomancer_ 8y ago
    And as the old saying continues, "...so instead you invented a proprietary one, with hidden code, and told everyone it's secure."