7 ms·
Apple wants users to trust iOS, but it doesn’t trust iOS users
- bradknowles 5y agoTrusting users means trusting all users. All 100.0000000% of them. But there’s a small percentage of users out there who can’t be trusted. And a single bad apple really can ruin the whole batch. Or, at least ruin it for everyone else. So, we must instead take the default “users are untrustworthy” approach, until demonstrated otherwise or until we are forcibly reconfigured to do otherwise. The key is in striking the right balance, and having fine-grained enough control that even when we end up giving more trust to a particular user in one context, this doesn’t cause excessive risk increase elsewhere, in case we were tricked into giving the trust when we shouldn’t. Google for “trusting trust”. This rabbit hole goes all the way down, and it’s turtles all the way.