3 ms·
Also in defense of users, they should be able to use any app they install without worrying whether or not it's malware.
by jakelazaroff 7y ago
Also in defense of users, they should be able to use any app they install without worrying whether or not it's malware.
- heavyset_go 7y agoAgreed. This is why a robust sandbox/containerization system is preferred to an arbitrary approval system. Anti-user features like intrusive telemetry are standard fare in commercial software, and running those apps in a sandbox could protect the user without having to rely on Apple's approval system.
- jakelazaroff 7y agoYup, that's why Mac App Store apps are sandboxed. The Mac App Store is the experience we're describing: install an app and use it without having to call tech support or worry about malware.
- heavyset_go 7y ago> The Mac App Store is the experience we're describing It isn't if the user wants to use software that isn't available on the App Store. Arbitrary programs can be run with the macOS sandbox, there is no need for the App Store for security.
- saagarjha 7y agoVery few applications opt in to the macOS sandbox outside of the App Store.
- heavyset_go 7y agoWe're talking about an optimal security platform. Apple could very well build macOS security around sandboxd without the App Store, but chose not to.
- saagarjha 7y agoYou’re free to use the sandbox outside of the App Store, but the problem is that there is little incentive to do so unless Apple forces you to through App Store review.
- heavyset_go 7y agoI'm thinking of something like QubesOS. Apple could enable the sandbox by default for all applications. There's no need for an App Store.