logoalt Hacker News

xp84yesterday at 7:54 PM2 repliesview on HN

I’m glad I don’t even rely on this dumb system in the first place. I just run programs that don’t do shady shit. Wish I could disable these idiotic prompts entirely and go back to how it was before.

“Word” would like to access the files in your “Documents” folder

“Terminal” would like to access the files in your “Downloads” folder.

Yes, because I am telling them to access the files.


Replies

john_strinlaiyesterday at 7:59 PM

>I just run programs that don’t do shady shit.

you hand-audit every update for every program you run? can you share your workflow to do this?

otherwise, i am not sure how you can possibly guarantee that the programs you are running "dont do shady shit" (or, "wont do shady shit" in the future). there have been several compromises of non-shady programs and libraries in recent memory.

ted_dunningyesterday at 8:06 PM

Wow... that would be great.

All that remains is an algorithm to reliably determine which programs do "shady shit". How is it that you determine that Microsoft updates have not been tampered?

(insincere) apologies for the snarky tone. You are making light of a very hard problem and default deny until confirmed by the user isn't a bad first approximation.