3 ms·
Android has better sandboxing for apps (Java virtual machine + process isolation + user isolation + se-linux + containers & virtualization in some cases). But t
by panpanna 7y ago
Android has better sandboxing for apps (Java virtual machine + process isolation + user isolation + se-linux + containers & virtualization in some cases). But the permission system is so badly designed it's almost wide open.
The hardware you are thinking of is mainly used for secure storage and crypto.
- on_and_off 7y agoWhat's wrong with the permission system design ? (agree otherwise on the refutal of GP, but curious about that point)
- panpanna 7y agoOld permissions were too broad. Need a file? Here is a permission to look at ALL files! More restrictive permissions (and a new model where you don't need a permission but user decides what file to access) were added later but it takes time to get developers to change.