3 ms·
> is that MacOS allows any command to read the entire contents of your keychain (yes, with all your passwords). In Windows and Linux any application also can
by codedokode 3y ago
> is that MacOS allows any command to read the entire contents of your keychain (yes, with all your passwords).
In Windows and Linux any application also can read any user's file. And in Chrome and Firefox, any extension can read browser history, capture key presses and so on. If you install Python packages, they can do anything to your computer, if you download a plugin for Gimp the same issue exists. On desktop security is broken since forever. OS developers (especially Linux developers) cannot innovate and use outdated security model from 80s where users are isolated from each other but today most computers have a single user and it makes little sense. Today you need to isolate program from a program, and prevent them from fingerprinting user's device (for example, in Linux any app can read MAC addresses, hardware serial numbers, list of nearby WiFi points and nobody cares about that).
- pcthrowaway 3y ago> Linux any application also can read any user's file Surely you mean any root application? Or is my understanding of the Linux security model completely incorrect? > And in Chrome and Firefox, any extension can read browser history, capture key presses and so on Also no, extensions have different privileges you must accept. There are lots of problems with that security model, but it doesn't any extension can do those things
- silisili 3y agoThe default permissions are up to the distro(umask settings), but AFAIK most use 0644 by default, making every home folder readable by every user.