3 ms·

I disagree that there's no transition. This looks like a pretty good alternative: https://www.andrew.cmu.edu/user/bparno/papers/user-driven.pdf https://www.an

I disagree that there's no transition. This looks like a pretty good alternative: https://www.andrew.cmu.edu/user/bparno/papers/user-driven.pdf https://www.andrew.cmu.edu/user/bparno/papers/user-driven.pd... Instead of the OS displaying an annoying prompt when the application tries to use a privilege, the application embeds an OS-drawn access control gadget inside its UI, such that the user interacting with the UI grants the privilege.

comex 7y ago
macOS does something similar already for file open/save dialogs: they’re drawn by a trusted OS component instead of directly by the app, and the user’s act of selecting a file grants the app permission to access that file without an additional dialog.
misterdata 7y ago
Actually not far from how it works on macOS. Usage of a system "open file" dialog automatically creates a permission for the application to access that file from inside its container. https://developer.apple.com/library/archive/documentation/Security/Conceptual/AppSandboxDesignGuide/AppSandboxInDepth/AppSandboxInDepth.html https://developer.apple.com/library/archive/documentation/Se... (search for "Powerbox")