3 ms·

Fully agree. I want better sandboxing. I want sandboxing by default, just like my browser. By default you can do nothing, except some networking. I don't want

Fully agree. I want better sandboxing. I want sandboxing by default, just like my browser. By default you can do nothing, except some networking. I don't want to give access to complete folders. Want to open a file? Show me an open dialog, or a drop target. Want to read something from my home directory? Tough luck

VWWHFSfQ 5y ago
but what if _you_ want to do those things?
- jbverschoor 5y ago
  As a developer you should specify exactly what you’re doing. The entitlements plists should be waaay more strict. And, I want Apple to enforce a stricter policy on certain capabilities. Different levels of developers, where they will actually be fined, delisted and reimburse customers if they don’t obey the rules. There is no need to access so many things. Heck, you can do so much in a browser these days. Don’t touch my stuff, or go to Apple jail. Simple. No need to monitor key keystrokes. No need to secretly read my contacts. No need to access full folders. If you need that, I’ll give it to you manually.
deleted 5y ago
[deleted]
planb 5y ago
macOS sandboxing does exactly that. The Mac App Store enforces sandboxing. What you are asking for is applying the App Store model from iOS to macOS.
- jbverschoor 5y ago
  Sandboxing can do things yes. But it's fairly undocumented. Deprecated. And it's not used nor set up by default. What I'm asking for is: - Sandboxed applications. Perhaps something similar to containers where __I__ decide what I/O is allowed - I don't want to rely on manual checks by Apple. It only works partially. Sandbox and security interfaces should be simple and user friendly. I don't want to create a massive sandbox configuration file by hand.
ashneo76 5y ago
And this how general computing ends. Only apple holds the keys to the kingdom and decides what a user should be able to do with a device they supposedly own. And that leads to users getting more and more disconnected from their tools and apple telling people how dumb they are or aren't Having to type "win" to start a Windows system is how I learned stuff

VWWHFSfQ 5y ago

but what if _you_ want to do those things?

jbverschoor 5y ago
As a developer you should specify exactly what you’re doing. The entitlements plists should be waaay more strict. And, I want Apple to enforce a stricter policy on certain capabilities. Different levels of developers, where they will actually be fined, delisted and reimburse customers if they don’t obey the rules. There is no need to access so many things. Heck, you can do so much in a browser these days. Don’t touch my stuff, or go to Apple jail. Simple. No need to monitor key keystrokes. No need to secretly read my contacts. No need to access full folders. If you need that, I’ll give it to you manually.

deleted 5y ago

[deleted]

planb 5y ago

macOS sandboxing does exactly that. The Mac App Store enforces sandboxing. What you are asking for is applying the App Store model from iOS to macOS.

jbverschoor 5y ago
Sandboxing can do things yes. But it's fairly undocumented. Deprecated. And it's not used nor set up by default. What I'm asking for is: - Sandboxed applications. Perhaps something similar to containers where __I__ decide what I/O is allowed - I don't want to rely on manual checks by Apple. It only works partially. Sandbox and security interfaces should be simple and user friendly. I don't want to create a massive sandbox configuration file by hand.

ashneo76 5y ago

And this how general computing ends. Only apple holds the keys to the kingdom and decides what a user should be able to do with a device they supposedly own. And that leads to users getting more and more disconnected from their tools and apple telling people how dumb they are or aren't Having to type "win" to start a Windows system is how I learned stuff