3 ms·
> Yeah, though 'jcelerier brought up a case where "insecure" behavior is a feature, and the more "secure" design is directly incompatible with it I don't think
by naasking 2y ago
> Yeah, though 'jcelerier brought up a case where "insecure" behavior is a feature, and the more "secure" design is directly incompatible with it
I don't think it's fundamentally incompatible with a secure design though, you just need to reify the authority to do those things so you can explicitly grant them to specific programs as appropriate.
- jcelerier 2y agothis is how you end up with the living hell that are Android and iOS
- naasking 2y agoThat seems a little melodramatic, particularly since your only other options are that every untrusted program can access every authority like capturing every keystroke, or all programs are effectively neutered.
- jcelerier 2y ago> every untrusted program can access every authority like capturing every keystroke, The most used desktop OS on the planet has allowed this since forever and the world hasn't ended
- naasking 2y ago"World ending" is not the only valid security metric. Lots of viruses, worms and security vulnerabilities have. This is increasingly untenable as more of people's lives are in data.