6 ms·
Things the user can override are things social engineers can convince users to override.
by etchalon 4y ago
Things the user can override are things social engineers can convince users to override.
- cmg 4y agoExactly. Technical measures are important, but if someone wants to play a game or do something that's been banned on Apple's stores and finds a site that claims to have an installer (which is actually malware) with instructions to disable Gatekeeper or SIP or what not, social engineering can work. Their goal is to do the thing they wanted to do, probably not thinking of security in the meanwhile. Popup alerts are going to be interpreted as something to get rid of so they can do the thing. It's a difficult balance. Power users, engineers, developers - we can (usually) tell when warnings need to be heeded. People who use their devices to achieve a goal without really understanding or caring about what's happening usually won't.
- macintux 4y agoI still recall when that viral elf bowling game was showing up on everyone's computers, and it struck me that we were all quite fortunate it wasn't secretly malware.
- GekkePrutser 4y agoIt's not a balance. There must be a way to override it. I really don't want Apple to decide what I can have on my computer like they do with iOS. It'll be more secure but also a lot less free and functional.
- KerrAvon 4y agoYes. Note that thus is the technical argument for disallowing sideloading.
- josephcsible 4y agoLet's also ban antifreeze because someone could kill you by socially engineering you into drinking it.
- grishka 4y agoTo which my answer is — being alive is risky, get over it and stop treating all people like idiots that need constant oversight lest they do something potentially dangerous.
- etchalon 4y ago"... and that's why I don't wear a helmet."
- r00fus 4y agoThis is overboard. Defaults matter a LOT. Requiring users to override defaults to deliver ad/malware is a losing proposition and ad/malware creators know this.