3 ms·
> Why do we let any random application open its own files and folders at will? The actual selection and opening of files and other resources should be the job o
by kalleboo 3y ago
> Why do we let any random application open its own files and folders at will? The actual selection and opening of files and other resources should be the job of the operating system
This is how macOS works these days with sandboxing. Unless you manually go into system settings to grant "full disk access", apps only get access to files the user has manually selected (through the system open dialog, drag and drop, double-clicking, etc)
People continually decry this as "iOSification of the Mac", "the end of general purpose computing" and "too many damn permissions dialogs what is this Windows Vista or something"
- breakfastduck 3y agoYeah I don't really understand the push back on the way they're handling it. I actually think zero trust to access the filesystem without explicit confirmation is a good thing.
- cobbal 3y agoMy favorite consequence of this is that running "find ~" now blocks on many GUI dialogs. Apple is sending a "we don't care about developers/power users" message very loudly.
- mike_hearn 3y agoAlmost but not quite. Mac sandboxing is optional and doesn't eliminate the signing requirement because Apple see it as a way for app authors to reduce the impact of vulns in their app, not as a way for users to run untrusted Mac apps. Therefore there's no GUI to see whether an app uses the sandbox or not, or what permissions it requests, and apps can statically request any permissions they want and they'll be granted silently. Apple do this because their vision of solving software trust revolves around vetting people in the app stores. It's still very much code signing and identity based. Of all app platforms, only the web attempts to let people run arbitrary malicious code without risk.