> In short: stop asking the user, just design the system to grossly limit the scope and impact of any damage. Yep. This has to come from OS vendors and while

> In short: stop asking the user, just design the system to grossly limit the scope and impact of any damage. Yep. This has to come from OS vendors and while iOS and Android took some steps in this direction they're still basically POSIX about it instead of capability-based. There's also a really unfortunate trend where apps want to be the entire user interface for everything. Manage the SMSs, be the camera and photos albums, handle payments, etc. This breaks all security guarantees by the OS.