4 ms·
While I agree with you, without using a more granular permission paradigm I get more than a little antsy giving third-party software arbitrary access to even my
by EvanAnderson 1y ago
While I agree with you, without using a more granular permission paradigm I get more than a little antsy giving third-party software arbitrary access to even my standard user's privileges on Windows.
I've been using a dedicated computer for banking / finance work for a few years now. I also run some software that I consider less trustworthy on my "daily driver" Windows PC as a dedicated user, separate from my "daily driver" account.
I really need to make the jump to Qubes. I've been meaning to for years. The learning curve for their contrivances seems steep and I'm lazy.
- stavros 1y agoOh yeah, definitely, but mobile OSes do this fairly well. Windows just asks if you want to give access to everything or not, of course you're always going to click yes, especially if the program doesn't work without it.
- dwattttt 1y agoThere's plenty of actually granular permissions; they're just not used by anyone. How many people on Windows create separate user accounts, run programs as those accounts (hello runas), & set ACLs?
- ranger_danger 1y agoNot many, but I have found Sandboxie to be quite useful for this purpose.
- ClumsyPilot 1y agoIt’s not user friendly
- dwattttt 1y agoIt sure isn't. Although its competition is stuff like chmod (way less granular), and SELinux, and SELinux isn't winning any usability competitions either.