3 ms·
>If applications were also given the capability to subscribe minimally to resources they require (e.g. this app will access foo.example.com, and bar.example.com
by lightbyte 8y ago
>If applications were also given the capability to subscribe minimally to resources they require (e.g. this app will access foo.example.com, and bar.example.com, and otherwise interact with registered sharing handlers through the OS), etc, we could be a lot more assured of an application not secretly spiriting away our data, at least if we cared to pay attention.
After which apps will get an update where they first send your data to app-website.com where their own servers will secretly spirit away your data
- kbenson 8y agoThat's why binary signature capability is important, and why very granular permissions are required. Any application that has even the capability to execute remote code should be precluded from getting the best ratings, and come with a disclaimer from the ratings company. It's hard, and people will try to game it, but at least you have a company that is incentivized to try to solve the problem because it actually matters if they do a bad job, instead of a monopoly (within that market) doing so with almost no repercussions if they do it poorly.