4 ms·
Why should Python program have access to SSH keys? Popular Linux distributions, unlike proprietary systems like Android or iOs, cannot protect user's data from
by codedokode 7y ago
Why should Python program have access to SSH keys? Popular Linux distributions, unlike proprietary systems like Android or iOs, cannot protect user's data from malicious programs run by the user.
Also, in popular Linux distributions programs can read unique hardware identifiers like MAC address or HDD serial number, read browser's history and cookies. These valuable data are not protected by Linux.
- 3fe9a03ccd14ca5 7y agoMac has started prompting users when programs access the file system. I hope they implement a HUGE warning is that directory is ~/.ssh > These valuable data are not protected by Linux. That’s extremely scary to me.
- NieDzejkob 7y agoAndroid isn't proprietary. On the other hand, Windows and macOS, which, as far as I am aware, also have this problem, are proprietary. Hence, I don't see why an argument like "unlike proprietary systems" is justified.
- pjmlp 7y agoWindows and macOS have been pushing for sandboxes for quite a while as well, exactly to prevent this kind of behavior. Currently macOS is more agressive than Windows on this area, with Apple now requiring notarization for all software, which you can still bypass, but need to explicitly allow it.
- saagarjha 7y agoApple does not require notarization for all software; it's just enabled by default and checked on all applications downloaded from the internet and opened through Launch Services.
- pjmlp 7y agoWhich is already more than any other FOSS UNIX. As for macOS, I am sure that it will come, as these features have been slowly being added release after release.