• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Sandboxing die.die.die
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Sandboxing die.die.die


  • Subject: Re: Sandboxing die.die.die
  • From: Jayson Adams <email@hidden>
  • Date: Wed, 22 Aug 2012 11:03:22 -0700

On Aug 22, 2012, at 8:40 AM, Kyle Sluder wrote:

> On Aug 22, 2012, at 8:29 AM, Jayson Adams <email@hidden> wrote:
>
>>
>> Ah, that explains why all of Apple's apps are sandboxed  Riiiiight.
>
> The big ones are: Mail, Safari, Preview.

How about Finder? AddressBook?  Calendar? iPhoto?  Pages?  Numbers?  And. On. And. On.

> But arguing against the basic premise of sandboxing is a fruitless endeavor. The user cannot and should not be forced to trust you to do the right thing.


I aren't arguing against that (not that I am in agreement either).  I am arguing against this statement:

> Because in the face of a successful attack, "you" might not be the author of the executing code either.

That's Apple positioning for the reason behind sandboxing of developer apps but I mean really, if I'm a hacker I'm going to go after the biggest target out there (you know, Finder, AddressBook, Calendar, etc.).  I'm wouldn't waste my time with third-party apps when there are lots of other targets that come pre-installed on every single machine.

Best,


__jayson

Circus Ponies NoteBook - Introducing An App That Boosts Your Productivity
at Work or School, So You Get The Grades, Raises and Promotions You Want.

www.circusponies.com



_______________________________________________

Cocoa-dev mailing list (email@hidden)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

  • Follow-Ups:
    • Re: Sandboxing die.die.die
      • From: koko <email@hidden>
References: 
 >Sandboxing die.die.die (From: Graham Cox <email@hidden>)
 >Re: Sandboxing die.die.die (From: Jens Alfke <email@hidden>)
 >Re: Sandboxing die.die.die (From: Kyle Sluder <email@hidden>)
 >Re: Sandboxing die.die.die (From: Jayson Adams <email@hidden>)
 >Re: Sandboxing die.die.die (From: Kyle Sluder <email@hidden>)

  • Prev by Date: Re: Sandboxing die.die.die
  • Next by Date: Re: Sandboxing die.die.die
  • Previous by thread: Re: Sandboxing die.die.die
  • Next by thread: Re: Sandboxing die.die.die
  • Index(es):
    • Date
    • Thread