3 ms·
Or maybe the vulnerabilities should be handled at the OS level with confirmation of privileged access at the user level. If I download a notepad app and it asks
by zackees 7y ago
Or maybe the vulnerabilities should be handled at the OS level with confirmation of privileged access at the user level. If I download a notepad app and it asks me record then that is something that I can respond with.
The OS vulnerabilities being exploited should be fixed. The solution of a white list solution managed by unaccountable tech oligarchs should be laughed at and then resisted at all costs.
- nneonneo 7y agoYes, this is more or less sandboxing. The fact that a freshly downloaded binary has r/w access to all of my files should be considered a vulnerability nowadays. The macOS approach, in which a binary only gets access to files that are explicitly selected through the OS’s file chooser, is a good first step. The downside is that it can get very annoying for the user. An ideal solution for desktop machines still doesn’t quite exist.
- contextfree 7y agoThat is also the UWP approach on Windows (though there are also ways to grant a UWP application broader filesystem access)