3 ms·
Honestly, whenever some malware like this is revealed, that just makes me wish for more sandboxing and alerting in OSes. For example, each app getting its own w
by KronisLV 2y ago
Honestly, whenever some malware like this is revealed, that just makes me wish for more sandboxing and alerting in OSes. For example, each app getting its own writable directory structure and access to anything else needing to be explicitly granted by the user.
It would require work to make the UX not be horrible, but that's a solvable problem. The fact that we don't have that in mainstream OSes in $CURRENT_YEAR given the security situation of the software out there, is insane.
- amelius 2y agoAgree. And code libraries should be similarly isolated.
- _23sd 2y agoOptional app sandboxing that does what you're talking about already exists on every major OS, disregarding Linux distributions that don't have Flatpak. Seems to me it's less a UX problem and more cultural: a critical mass of developers take the easy way and users learn to ignore the alerts. Android has the same problem with the "all files access" permission. The one platform where this works, iOS, has a totalitarian ruler that requires all apps to be sandboxed and not request gratuitous permissions. To really get around the culture problem you would need an OS that lacks the concept of undeclared data sharing between different packages.
- ikekkdcjkfke 2y agoFile system and syscall filter driver that asks user when something is accessing something it did not create