4 ms·
I'm hoping the side-loaded apps are sandboxed. The facebooks of the world will cheat a bit harder to keep their apps running in the background, but at least I
by dunham 3y ago
I'm hoping the side-loaded apps are sandboxed. The facebooks of the world will cheat a bit harder to keep their apps running in the background, but at least I can control who gets access to files, contacts, and location.
And even for apps that I trust 100%, including stuff I personally write, there is exposure to zero days if you do stuff like display images or web content. I'd like the extra safety net of sandboxing.
- josephcsible 3y agoIf such sandboxing doesn't have negative side effects like breaking some legitimate apps, then even apps from the App Store should be sandboxed. Otherwise, even if they're technically allowing sideloading, it's totally unfair and basically useless.
- dunham 3y agoI'm not sure I understand, apps in the store are already sandboxed, which affords me some protection from them. I'd like the same protection from side-loaded apps. Perhaps relaxing the no-JIT restriction, though. I think I'd be ok with them relaxing that in side-load. It might be fine in normal apps too, since we have lockdown mode to disable it across the board (including MobileSafari) if extra security against zero-days is needed.
- josephcsible 3y agoAh, I misunderstood your original comment. I thought you were advocating for sideloaded apps to be subject to an extra layer of sandboxing beyond what App Store apps are today.