3 ms·
A $5 bill in your wallet is a capability. Capability based security is like handing someone $5, not eternal access to all the funds in your wallet. Phones don'
by mikewarot 4y ago
A $5 bill in your wallet is a capability. Capability based security is like handing someone $5, not eternal access to all the funds in your wallet.
Phones don't do capability based security. There's no way to say, here... you can have access to THIS photo, or this location, once, in an easy way.
On PCs, you have to trust the application to do what it says when it uses the system supplied dialog boxes to "open" files, etc. In a capability based system, that's not the case. The OS never trusts the application, ever.
- guessbest 4y agoMacOS is doing this.
- mikewarot 4y agoThis does not appear to the case. There is no reference to single file run-time assignment of capabilities in their security page[1] "Give X permission to access Y forever" is not capability based security. [1] https://www.apple.com/macos/security/ https://www.apple.com/macos/security/
- ako 4y agoiOS is doing this: always grant permission for this capability, only when I use the app, or only once.
- Tagbert 4y agoin iOS you can grant apps access to a limited set of photos though the process is multi-step and most users probably just default to "allow all".