2 ms·
To be specific, I was thinking that around the same time we started earnestly working on browser sandboxing and fine-grained extension/app privileges, we should
by fwlr 4y ago
To be specific, I was thinking that around the same time we started earnestly working on browser sandboxing and fine-grained extension/app privileges, we should have been doing the same thing for our packages. When Joe Normal tries to install an extension, Chrome tells him it wants to access his microphone; we could have had a similar thing here. “tennsserflow.py requests permission to modify the root filesystem”, “PERM: free-fortnite-skin asks to open URLs. grant / deny / uninstall ?”, etc.
- dgb23 4y agoThis needs support at the language/runtime level to be even remotely robust. Especially when we’re talking about highly dynamic and popular languages like JS/Python etc.
- thenerdhead 4y agoHere's a helpful analogy that represents a problem per line: We download code From the internet Written by unknown individuals That we haven't read Which we execute With full permissions On our trusted devices Where we keep our most important data