Hacker News new | ask | show | jobs
by omnimus 247 days ago
Sandboxing isn't feature dependent on Apple being a big curator is it? These are orthogonal but not the same issues. I've never said that PCs don't have viruses or that it isn't a problem, only that I should be able to install software from developer I trust if I want to.

I agree let's have sandboxed app instalations on platforms. Flatpak is already going this way. But it looks like big players Microsoft,Apple and Google are gatekeeping app sandboxing behind their stores instead of allowing people/devs to use sandboxing directly.

1 comments

And then there will still be complaints about Google limiting what apps can do and take away “your freedom”. What happens when a third party app wants to be able to read in other apps internal storage to create a back up solution like iCloud? Should that be allowed? What about if they want to create an app that autocompletes what you type when working in another app requiring key logger like capabilities?
What part of "I should be able to install software from developer I trust if I want to" was hard to understand?
Then you don’t want sandboxing if you want all of those permissions.
You can have sandboxing and run whatever you want. I do it every day on PCs where I, the user, can define the terms of sandboxing any appliclation I want, and not a trillion dollar corporation using sandboxes to enforce their chosen revenue streams upon users.
Yes and for you to think that is a valid argument for a consumer product is why most open source products suck for consumers and end up being about as bad as the “homermobile”.
You do realize macOS has used sandboxing by default for over a decade, right?

ChromeOS/ChromiumOS uses heavy sandboxing. Android currently uses sandboxing transparently, despite plans to iOS-ify the platform. Hell, Windows uses app isolation sandboxing these days.

All four consumer platforms let you run the software you want to and they provide sandboxing at the same time. They also let you configure sandboxes, too.

As for open source, consumer products like the Steam Deck use sandboxes, popular game launchers like Lutris use sandboxes, Firefox transparently uses sandboxing by default, as does Chromium/Chrome, anything installed automatically with Flatpak or Snap are sandboxed by default and AppArmor/SELinux works in the background automatically on most distros and are activated by default.

Saying open source projects like the Steam Deck, Firefox, Chromium, ChromiumOS and Android suck for consumers is a weird opinion, but you're free to have it.

Sure I do. I sandbox what I want when I want.
So now you are expecting users to navigate hundreds of permissions and know the consequences of each one? How did that work out for Vista?
Yes, if you bother with the rigmarole of escaping walled garden then you should be expected to navigate 20-30 permissions, which is in practice all that's necessary.

If users without that level of technical skill are pressured into making those decisions, that's because they're being mistreated.