4 ms·
The whole drama around with how Recall store data is misguided. The problem is not how this data is stored, it is more fundamental i.e how windows doesn't have
by ankurdhama 2y ago
The whole drama around with how Recall store data is misguided. The problem is not how this data is stored, it is more fundamental i.e how windows doesn't have a proper app sand boxing. MS App store apps have sandboxing and permission model but most of other apps on windows are still just bunch of DLLs and EXEs that run with all the permissions that the current user have. Until MS solves this problem there is no way to secure such things.
- barrkel 2y agoI don't want to run an operating system where I need to get the vendor's permission to run my own applications under my authority.
- Kototama 2y agoThis is not correlated. Android has sandboxing and you can run your own applications.
- barrkel 2y agoI can't run with full authority on Android, however. My own apps can't access my own data from other apps that I run. This is not something I can forego on my main computing device. I'm willing to tolerate it in a phone because it's just a tool; I wouldn't use a phone to store data I wouldn't mind losing.
- saagarjha 2y agoWhat kind of solution are you looking for here? The ability to sign your own apps with a platform signature?
- DougN7 2y agoThe ability to go in and grab your own data (which you have to do using some app or another), and do whatever you like with it, such as back it up, move it, inspect it, or try to get the data into a new app because the old app no longer runs for some reason.
- mvdtnz 2y agoAs a user and programmer - good. Sandboxing is what is ruining modern software. I want to be able to reach into my file system with software. I want software to be able to integrate with other software even if those programs don't have APIs or weren't designed for integration. I want to be able to easily install mods for games. Most of all I don't want to manage annoying permissions screens and popups for every non trivial interaction. My computer, my choice.
- sanitycheck 2y agoI'm the opposite. As a user I'm not realistically going to audit every new line of code in a piece of software with every update (if I even can) and I do not at all like the current model where we have to trust software creators blindly. It's the reason anti-virus/malware software is necessary on Windows. As a developer I would much rather that users don't have to trust us blindly, "this app only needs an internet connection and access to this one directory" would be a far easier sell than the current scenario. Popups, in the Windows UAC sense, yes, those are utter shit and train users to automatically give permission. Giving specific permissions once, more like Android, is much better.
- benterix 2y agoI am both of you - sometimes I want to do things in the main filesystem, sometimes I want to test an app in a sandbox - and I use a virtual machine for that.
- klauserc 2y agoThere is Windows S Mode where you can only run Windows Store apps and only use Microsoft Edge. That should qualify for "proper sandboxing", shouldn't it? Then again, no one who needs an actually useful computer runs Windows in S mode.
- ankurdhama 2y ago> Then again, no one who needs an actually useful computer runs Windows in S mode. That's because of all useful apps for Windows are not sandboxed. This is where the apps vendor have to do the required work but they are too lazy to do that.
- Brian_K_White 2y agoSandboxing itself makes the apps not useful.
- keyringlight 2y agoI'm reminded a little of Android's challenges with misuse of the accessibility service overlay by trojans, and how to handle that on the user side when applications hit you with permission requests.