3 ms·

While I agree in principle, in this case I'm not sure any permission system would help. An anti malware program has legitimate reason to access the internet. It

While I agree in principle, in this case I'm not sure any permission system would help. An anti malware program has legitimate reason to access the internet. It also has legitimate reason to read files. Heck it may even have legitimate reason to upload some of that data for analysis. Those first two capabilities are very hard to keep separate (you'd need one process for each capability and a very tight restriction on interprocess communication). The third is game over. I think ultimately the problem is more about trust and oversight.

drb91 8y ago
The type and destination of the network request would be useful to block/allow as necessary, ala little snitch. However, IMHO AV software should be reviewed as such. They clearly didn’t do this. What is the point of the app store? It seems to be a proxy into sandboxing, but it’s hardly useful if there’s no review that the sandbox is effective, and the sandboxing would be more useful decoupled from the app store so that you can sandbox arbitrary apps. If the controls are there, it’s not obvious.