3 ms·

Important to note this isn't a memory corruption bug, though. This is a case of the application working as designed, but in unintended ways. A logic flaw. I s

Important to note this isn't a memory corruption bug, though. This is a case of the application working as designed, but in unintended ways. A logic flaw. I say this because I don't see a lot of effort being put into solving these types of security issues, compared to e.g. memory safety issues.

brundolf 6y ago
Unlike memory safety issues it's not really a category that tends to have category-wide solutions
- eyelidlessness 6y ago
  V1: “This file we downloaded for your convenience is requesting access to [folder]. This may harm your computer or expose you to unknown security risk. Are you sure?” V2: “This file unexpectedly tried to access [folder].” The exact same mechanism Apple already used with GateKeeper and FS access for programs at runtime. Why does it need to be more complicated than that?
saagarjha 6y ago
Yep, it’s a confused deputy problem.