5 ms·
At least macos has file access permissions.
by aucisson_masque 8mo ago
At least macos has file access permissions.
- zx8080 8mo agoComparing to DOS or what? No one runs Win10/11 on FAT now, while NTFS has access permissions and ACLs.
- retired 8mo agoI remember that Win32 apps on Windows 10 and 11 can do whatever they want with the users personal files. Has that changed?
- zx8080 8mo agoIn Win, access to files are controlled by ACL when NTFS is used (dating back to NT 3.1 with NTFS). So it depends on which user runs a process. Basic hygiene is very simple: never run as Administrator. Create and use a regular user or poweruser group user. It's similar to a regular linux practice. Use Administrator account when needed only.
- deleted 8mo ago[deleted]
- p_ing 8mo agoYou can create a separate user, but even a user in the administrators group doesn't have an admin token until elevation. If you trust yourself to not blindly click OK on every UAC prompt, a single user account in the admin group is fine.
- trinix912 8mo agoGP is talking about isolation inside the current user. Recent macOS versions ask before allowing a program to access files inside Documents, Desktop, etc. Whether that helps or not is debatable, but it’s not quite the same as what Windows ACLs do out of the box. To achieve the same on Windows, one would have to run the program as a different user to which they’d selectively grant access to the folders inside their profile.
- jeroenhd 8mo agoYou can enable controlled folders on Windows: https://learn.microsoft.com/en-us/defender-endpoint/controlled-folders https://learn.microsoft.com/en-us/defender-endpoint/controll... It's not enabled by default, though. Enabling it by default would probably break just about every Windows program out there and like UAC on Vista, everyone would turn it off immediately.
- halapro 8mo ago> never run as Administrator. Computer asks for password. I type in password. Admin access prompts are honestly a joke even on macOS. The source is completely opaque.
- deleted 8mo ago[deleted]
- Asmod4n 8mo agoWin32 Apps can access anything you can access and also read out some text fields from apps you have running, via accessibility APIs.
- tokyobreakfast 8mo agoWhat does that even mean? NTFS file access permissions (35 years old at this point) are far more powerful than 1970s-era Unix permissions model.
- tcoff91 8mo agoHe’s talking about sandboxing and permissions prompts
- emmelaich 8mo agoIt's referring to the fact that Terminal doesn't have free access to all your files and folders, despite what the traditional file access perms say.
- tokyobreakfast 8mo agoWindows has this too, but it's off by default. I forgot what it's called, that's how often it gets used.
- p_ing 8mo agoYou're referring to [Sandboxing] Mandatory Access Controls [0]. Windows doesn't implement MAC in the same way, instead using Mandatory Integrity Controls [1]. [0] https://developer.apple.com/library/archive/documentation/Security/Conceptual/AuthenticationAndAuthorizationGuide/Permissions/Permissions.html https://developer.apple.com/library/archive/documentation/Se... [1] https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control https://learn.microsoft.com/en-us/windows/win32/secauthz/man... Windows implements ACLs in a far more granular way than macOS and most other Unicies, however (with the exception of Slowaris).
- nusl 8mo agoWindows can implement these things as much as they like, but if you paste a command into CMD.exe, it can access your files with no popup like MacOS gives you.
- TiredOfLife 8mo agohttps://learn.microsoft.com/en-us/defender-endpoint/enable-controlled-folders https://learn.microsoft.com/en-us/defender-endpoint/enable-c...