2 ms·

> Desktop apps can be worse for privacy if they're unsandboxed. Sure, but the point is that you have no idea if a binary is sandboxed before you execute it. >

> Desktop apps can be worse for privacy if they're unsandboxed. Sure, but the point is that you have no idea if a binary is sandboxed before you execute it. > because they process data locally instead of uploading it to a server to process No, they do whatever they want, which includes regularly transmitting all sorts of data over the internet, with far less restrictions and visibility compared to a browser. > these SaaS services are getting hacked left right and centre these days and that's before you take national borders/sovereignty issues and spying into account. And individual users get hacked far more often, primarily by being tricked into downloading and executing an arbitrary binary.

mike_hearn 5y ago
With app stores you do (or can) know that. But yes a default non-store distributed app must be trusted. In many cases that's fine because there are lots of ways to get trust other than sandboxes. MS Word or first party Apple apps don't really need to be sandboxed other than as defence-in-depth because they're from trusted brands, for example. Steam doesn't sandbox games as far as I'm aware and in reality nobody cares because Valve keeps scams and malware off the store. "No, they do whatever they want, which includes regularly transmitting all sorts of data over the internet, with far less restrictions and visibility compared to a browser." The browser transmits every detail of every interaction by design. Meanwhile it's not actually true that desktop apps constantly upload data. Many don't. The norms are totally different: not only can they operate telemetry free by their nature, even when companies do collect this they almost always let you opt-in or out. That's why telemetry in Windows is a constant source of controversy whereas for websites everyone has given up caring a long time ago - even the "best" privacy approaches on the web still generate detailed server logs of every button press and page navigation. "And individual users get hacked far more often, primarily by being tricked into downloading and executing an arbitrary binary." No, not any more. Maybe in 2003 but even many years ago this "tricking" was mostly about piracy. Nowadays? I don't even remember the last time I was asked to clean someone's computer of viruses. The average user has been impacted far worse by data leaks, hacked email and social media accounts, bank phishing etc in the past decade and that's not because desktop apps went away (they did not - games alone are an industry bigger than Hollywood). I'm not arguing against sandboxes. We should have a great cross platform mechanism for sandboxing non-web apps. But the web vs non-web privacy discussion is way, way more complex than just "web=good".

mike_hearn 5y ago

With app stores you do (or can) know that. But yes a default non-store distributed app must be trusted. In many cases that's fine because there are lots of ways to get trust other than sandboxes. MS Word or first party Apple apps don't really need to be sandboxed other than as defence-in-depth because they're from trusted brands, for example. Steam doesn't sandbox games as far as I'm aware and in reality nobody cares because Valve keeps scams and malware off the store. "No, they do whatever they want, which includes regularly transmitting all sorts of data over the internet, with far less restrictions and visibility compared to a browser." The browser transmits every detail of every interaction by design. Meanwhile it's not actually true that desktop apps constantly upload data. Many don't. The norms are totally different: not only can they operate telemetry free by their nature, even when companies do collect this they almost always let you opt-in or out. That's why telemetry in Windows is a constant source of controversy whereas for websites everyone has given up caring a long time ago - even the "best" privacy approaches on the web still generate detailed server logs of every button press and page navigation. "And individual users get hacked far more often, primarily by being tricked into downloading and executing an arbitrary binary." No, not any more. Maybe in 2003 but even many years ago this "tricking" was mostly about piracy. Nowadays? I don't even remember the last time I was asked to clean someone's computer of viruses. The average user has been impacted far worse by data leaks, hacked email and social media accounts, bank phishing etc in the past decade and that's not because desktop apps went away (they did not - games alone are an industry bigger than Hollywood). I'm not arguing against sandboxes. We should have a great cross platform mechanism for sandboxing non-web apps. But the web vs non-web privacy discussion is way, way more complex than just "web=good".