5 ms·

One idea I don't see discussed is that the App Store model is a disincentive for Apple to come up with better sandboxing and security. Apple is in fact uniquel

One idea I don't see discussed is that the App Store model is a disincentive for Apple to come up with better sandboxing and security. Apple is in fact uniquely positioned to introduce a better sandboxing model. They control most of the stack, crucially the CPU and the build toolchain, not to mention the PL. They could, were they not so reliant on the App Store auditing process, make it less likely for people to develop malware and privacy-invasive software, by building better abstractions around processes and IPC, through eg. virtualization and capabilities [0]. That, of course, would take away the main raison d'être of App Store, which is a significant money-maker for Apple. [0] https://fuchsia.dev/fuchsia-src/concepts#fuchsia_is_designed_for_security_and_privacy https://fuchsia.dev/fuchsia-src/concepts#fuchsia_is_designed...

TheSpiceIsLife 6y ago
The raison d'être of the Apple App Store is to make money. All other considerations are secondary at best.
- sjwright 6y ago
  Ultimately true of all businesses and all products.
  - TheSpiceIsLife 6y ago
    There's always exceptions... Some business exist with the intention of generating a loss, or some sort of tax avoidance scheme. Legally, I don't mean tax evasion.
threeseed 6y ago
Any chance you can dispel with the meaningless buzzwords ? "Abstractions around processes and IPC" does not reduce the number of malware and privacy invasive apps. And who knows what "virtualization and capabilities" even means in the context of iOS. It has been limiting and securing access to APIs/data that has been responsible for improving the privacy and security of iOS. For example warning about use of clipboard, per-use permission dialogs for contacts/photos/etc and randomising identifiers.
- AriaMinaei 6y ago
  You are being incharitable in reading the comment. Sandboxing and capabilities are buzzwords now? And meaningless? I'm happy to explain more if you frame your question (for which you seem to already have an answer) less combatively.

TheSpiceIsLife 6y ago

The raison d'être of the Apple App Store is to make money. All other considerations are secondary at best.

sjwright 6y ago
Ultimately true of all businesses and all products.
- TheSpiceIsLife 6y ago
  There's always exceptions... Some business exist with the intention of generating a loss, or some sort of tax avoidance scheme. Legally, I don't mean tax evasion.

threeseed 6y ago

Any chance you can dispel with the meaningless buzzwords ? "Abstractions around processes and IPC" does not reduce the number of malware and privacy invasive apps. And who knows what "virtualization and capabilities" even means in the context of iOS. It has been limiting and securing access to APIs/data that has been responsible for improving the privacy and security of iOS. For example warning about use of clipboard, per-use permission dialogs for contacts/photos/etc and randomising identifiers.

AriaMinaei 6y ago
You are being incharitable in reading the comment. Sandboxing and capabilities are buzzwords now? And meaningless? I'm happy to explain more if you frame your question (for which you seem to already have an answer) less combatively.