Minority Opinion: Computer security is a solved issue, and most people don't know about the solutions. We need operating systems that enforce file selection, i

Minority Opinion: Computer security is a solved issue, and most people don't know about the solutions. We need operating systems that enforce file selection, instead of deferring to the applications. This is known as capability based security, and most people think of "allow access to X" on their phone, which is NOT what I mean. When you want to open a file, an application shows a system supplied dialog box, then goes ahead and opens whatever the heck it wants with the full trust of the OS, no matter how wrong that is. All I'm asking for is the OS to handle the file dialog and pass a capability (like a file handle) to the app instead of trusting it blindly. The downside is that unless there are clever shims, this requires rewriting everything. --- The reason we have VMs then Docker then Containers is that our Operating Systems don't enforce capability based security, and we've been improvising a replacement for it in this manner.