@novenary I think the broken model has been around for so long that it's pretty difficult to transition people over to something safer.
Mobile OSes have gotten away with compartmentalized apps since there wasn't really a 20+ year old existing back catalog of applications that had to be sandboxed after the fact.
Desktop OSes unfortunately do have that downside. The biggest thing is that users generally expect to be able to access everything that their user can access through desktop apps (e.g. uploading files)
@mikoto@novenary Eh even on phones those permissions are pretty coarse grained in practice
You give file access to an app and now it can read your entire file storage (in which your cat pics and nudes would likely reside in)
The only difference is that key storage is not done together with file storage - I suppose this is a major improvement but on the other hand it is also somewhat weaker than what people usually believe (at least wrt sensitive files)
Add comment