5 ms·
The fact that Apple allows an application to be installed in this step is an issue with Apple's design.
by californical 7y ago
The fact that Apple allows an application to be installed in this step is an issue with Apple's design.
- saagarjha 7y agoIt’s a script, though; should they sandbox the preinstall phase? That would break most packages.
- steerablesafe 7y agoInstead of silently breaking they could have a popup like "Do you allow the preinstall script to write into /this/folder?" on a write operation outside of the sandbox.
- the_pwner224 7y ago99% of users will have no fucking idea what that means. They will either click 'Allow' (which makes this feature useless for 99% of people) or contact tech support (adds friction to installation, which is bad especially for conferencing software) or just give up and not use the product (which is bad for the company).
- catalogia 7y agoTo be fair, it would at least ruin Zoom's incentive to do any of this, since they wanted a streamlined process that prompts the user less. Why they didn't just use a dmg that has you drag the application into /Applications/ is something I still don't understand though. Surely that is the simplest most user friendly way to have non-technical users install applications without using the appstore.
- catalogia 7y agoMaybe so, but that doesn't excuse those exploiting that flaw.
- CGamesPlay 7y agoTo be fair, Apple has rectified this flaw by writing the Mac App Store, where applications can't pull these shenanigans and are properly sandboxed from one another.
- lonelappde 7y agoWhy is the store relevant to sandboxing?
- CGamesPlay 7y agoThey only allow sandboxed apps to be placed on the store.