Hacker News Reader

Comment by tokyodude | Hacker News Reader

it's far far worse than that. you can inject arbitrary code to all opponents so install a root kit and read their Bank account or install a cyberlocker ransomware or turn their machine into a bot net.

Windows and Mac (and Linux) really need to switch to as sandboxed systems and deprecate the 1980s style of code execution. The threats have changed and it's completely unacceptable how much access desktop apps have

View on HN

Apple tried sandboxing everything from the Mac App Store. Developers hated it.

Was it just the execution of the Mac App Store processes or the limitations of that particular sandbox implementation that was bad or are desktop apps incompatible with sandboxing because of the historical freedom they enjoyed?

I'm not an Objective-C developer--everything I ever wrote using the Mac App Store was in Java, of all things!--but I found it really not a problem at all.

There are some applications that were incompatible for one design reason or another with the OS X sandbox, but I still to this day think a lot of it was "this is harder than I am used to, therefore no."

Why 'tried'? It's still there and OS X itself is progressively making it less trivial for random unauthenticated code to do whatever it wants in general.

Sandboxing and app storification are separate things - one is a security measure and one is a grant of veto over all software on the platform to a single company.

I wouldn’t be willing to pay even a 3% performance penalty for iproved security on my gaming machine. However, I would be ok with booting in a gaming mode where I might even gain performance because all unnecessary services are switched off (in an extreme version you could imagine some kind of OS hybrid with a windows kernel and a minimal OS layer baked directly onto the game). To avoid negative consequences of this OS being less secure one could ban it from seeing data other than on a special game drive.

I guess this kind of makes the machine start in an Xbox mode, which would make perfect sense.

windows is trying that with UWP,they run on a sandboxed environment

Reply on news.ycombinator.com