4 ms·

It's a huge step forward, because some of the bad actors that have ruined mobile by abusing every possible API to read whatever they can get their hands on are

by blub 7y ago

It's a huge step forward, because some of the bad actors that have ruined mobile by abusing every possible API to read whatever they can get their hands on are also developing for the desktop. The article is a pathological example anyway, because I got zero prompts even on my work machine. And Vista was a good step forward also back then, but people can't be bothered to take care of their data. This is why security work is such a slog, you're dealing with motivated, well funded attackers that only need to succeed once, while the people controlling the key to the castle are mostly nincompoops.

jiofih 7y ago
Any chance you work in corporate IT security? Sounds about right. Treat your users like dummies, maybe shove a dozen “security” dialogs in their faces, and have no qualms about disrupting their workflows or providing crappy experiences.
- 72deluxe 7y ago
  But what experience would you recommend here instead? If 2 programs that require access start 5 minutes apart, do you stop/suspend the first one until another program starts and then show a dialog listing both for a good "experience"? What happens if another doesn't start for a while? Do you show the dialog after a certain time period? How can it see into the future and know what other program you are going to run in order to show the items in a nice neat single-window list? Or do you show multiple dialog prompts (like in the screenshot) because there is no way of knowing what disparate applications will access at any given time? My experience of corporate IT (having been a subject of someone else's policies) was to have my machine locked down to the maximum because someone somewhere once ran a random EXE they'd been emailed or downloaded and it contained ransomware and encrypted everything it could access (network servers too). As irritating as it was, what would you do to stop that happening again? It was a developer that ran that... This includes "professional" users who saw Edge or IE as "the Internet" and would get "IT" to add an ODBC entry for a database server, despite having worked there for 10 years. Most of my colleagues didn't know the difference between a database server and a terminal server. And this included management. What would you do instead then??
- JustFinishedBSG 7y ago
  > Treat your users like dummies Clearly you've never seen a "user". Dummy is tame, I would have described them differently.
ryandrake 7y ago
The article is asking the wrong question. He’s asking “Why is Apple doing this to me?” when Apple is just the messenger. He should be asking “Why on earth are all these little 3rd party utilities running at startup and asking for all of this access?” Personally, if I encountered this mess, I’d be shamed, inspired to meditate a bit on my own personal computing hygiene.
- blub 7y ago
  Indeed, and just like in the real world many computer users do the equivalent of not even washing their hands after using the bathroom.

by blub 7y ago

jiofih 7y ago

Any chance you work in corporate IT security? Sounds about right. Treat your users like dummies, maybe shove a dozen “security” dialogs in their faces, and have no qualms about disrupting their workflows or providing crappy experiences.

72deluxe 7y ago
But what experience would you recommend here instead? If 2 programs that require access start 5 minutes apart, do you stop/suspend the first one until another program starts and then show a dialog listing both for a good "experience"? What happens if another doesn't start for a while? Do you show the dialog after a certain time period? How can it see into the future and know what other program you are going to run in order to show the items in a nice neat single-window list? Or do you show multiple dialog prompts (like in the screenshot) because there is no way of knowing what disparate applications will access at any given time? My experience of corporate IT (having been a subject of someone else's policies) was to have my machine locked down to the maximum because someone somewhere once ran a random EXE they'd been emailed or downloaded and it contained ransomware and encrypted everything it could access (network servers too). As irritating as it was, what would you do to stop that happening again? It was a developer that ran that... This includes "professional" users who saw Edge or IE as "the Internet" and would get "IT" to add an ODBC entry for a database server, despite having worked there for 10 years. Most of my colleagues didn't know the difference between a database server and a terminal server. And this included management. What would you do instead then??
JustFinishedBSG 7y ago
> Treat your users like dummies Clearly you've never seen a "user". Dummy is tame, I would have described them differently.

ryandrake 7y ago

The article is asking the wrong question. He’s asking “Why is Apple doing this to me?” when Apple is just the messenger. He should be asking “Why on earth are all these little 3rd party utilities running at startup and asking for all of this access?” Personally, if I encountered this mess, I’d be shamed, inspired to meditate a bit on my own personal computing hygiene.

blub 7y ago
Indeed, and just like in the real world many computer users do the equivalent of not even washing their hands after using the bathroom.