Hacker News new | ask | show | jobs
by oridecon 3562 days ago
Too bad you still need a Microsoft account to use the store, besides sideloading. That's a deal breaker for me, at least on the desktop (I know you can login separately on each app).

1) How good is the sandbox? I followed the links but how battle-tested is it? What if you put an already sandboxed Chrome inside UWP, does it basically use almost the same calls or there are some extra benefits? Besides FS isolation.

2) Can I browse the "sandboxed disk" (including registry files) and export everything? So I can make backups or restore it later.

3) Does it stop apps from installing intrusive things? Some bank plugins use like 30% of my CPU on idle, run a lot of services on startup, so I have no option but to use a VM.

I'm really curious about all of this and there's almost no hype around it. All I see is people talking about walled gardens, privacy concerns (that I have too), how they screwed in the past with GFWL, Windows 8. But downloading software from 3rd party sources in 2016 is just awful. I want the Linux package manager experience. I don't trust any 3rd party like Ninite, Chocolatey, and they have like 10% of all the software I need anyways.

Let's see if the third time I make this comment gets a reply

3 comments

It's not a proper sandbox. Converted apps run with full trust. There's file system and registry redirection but a malicious app can get around it. See this discussion: https://arstechnica.com/civis/viewtopic.php?f=15&t=1312055

Also full trust vs app container here: https://msdn.microsoft.com/en-us/windows/uwp/porting/desktop...

That's worse than Win32 since it gives you a false sense of security and you have no way, AFAIK, to see what the app is doing (or to check if it's a true "native" UWP app). Some app uploading my personal stuff without my permission (no extra privileges required) is worse than a cryptolocker.
Almost every "store" requires an account. Try to use the Play Store without a Google account. That being said, since UWP itself isn't tied to the Store, as UWP expands, there will hopefully be third party sites to get UWP apps. (Eventually even Steam I presume will offer UWP apps.)

If you know where to look, pretty much everything in a UWP app can be opened via file explorer. Check out the C:\Users\yourusername\AppData\Local\Packages folder

The sandbox here seems somewhat battle-hardened, as it is based on App-V (and some other container systems in Windows), which Enterprises have used for a while and Office has used for every desktop install for several major releases (since 2013 or 2010?).