logoalt Hacker News

naikrovektoday at 3:34 PM3 repliesview on HN

My question to Apple, Microsoft, and the Linux kernel maintainers is this: Why is this even possible? Why is it possible for a running application to read information stored by so many other applications which are not related to the program in question?

Why is isolation between applications not in place by default? Backwards compatibility is not more important than this. Operating systems are supposed to get in the way of things like this and help us run our programs securely. Operating systems are not supposed to freely allow this to happen without user intervention which explicitly allows this to happen.

Why are we even remotely happy with our current operating systems when things like this, and ransomware, are possible by default?


Replies

pixl97today at 3:46 PM

>Why is it possible for a running application to read information stored by so many other applications which are not related to the program in question?

This question has been answered a million times, and thousands of times on HN alone.

Because in a desktop operating system the vast majority of people using their computer want to open files, they do that so applications can share information.

>Why is isolation between applications not in place by default?

This is mostly how phones work. The thing is the phone OS makes for a sucky platform for getting things done.

> Operating systems are supposed to get in the way

Operating systems that get in the way get one of two things. All their security settings disabled by the user (See Windows Vista) or not used by users.

Security and usage are at odds with each other. You have locks on your house right? Do you have locks on each of your cabinets? Your refrigerator? Your sock drawer?

Again, phones are one of the non-legacy places where there is far more security and files are kept in applications for the most part, bug they make terrible development platforms.

show 1 reply
rsynnotttoday at 4:17 PM

MacOS has some isolation by default nowadays, but in practice when the box pops up asking if you want to let VibecodedBullshit.app access Documents or whatever, everyone just reflexively hits 'yes'.

zxcvasdtoday at 3:58 PM

[dead]