3 ms·
Why installing an app allows to "drain wallets"? Why does a video chat app, which is installed from untrusted source, have an access to a wallet private key? Wh
by codedokode 2y ago
Why installing an app allows to "drain wallets"? Why does a video chat app, which is installed from untrusted source, have an access to a wallet private key? Why OS allows this?
- matsz 2y agoThere is no way to prevent this on the OS level without making an OS as locked down as iOS. Anything less, and the user will find a way to accidentally give admin permissions to random apps. NB: I don't believe that it's the OS's job to protect the user from themselves. Shielding people from consequences of their own actions results in people making worse mistakes later on.
- codedokode 2y agoThe OS's job is to protect user from malicious apps or apps with vulnerabilities. It does its job very poorly, for example, I have to manually build sandboxes and create users for every app, and I don't understand why this cannot be built-in and automated.
- namaria 2y agoHonestly, trusting the OS to save you is a bad idea. Why people have one omni device that owns their identity and assets and they will install software "someone online" asked them to on it is beyond me. Horrible opsec all around.
- codedokode 2y agoIt should be safe to install software. Just as opening a page in a browser is safe.
- namaria 2y agoIt will never be safe to run arbitrary code on a general computer. The kind of safety you're talking about is only possible in strictly walled gardens.