News for hackers. Stuff that matters.
Re:The Death of External Storage: Where's Google? by earhart on Friday March 29, 2019 @10:57AM (#19522236)
I don’t know how to trust an app. Like, how would I make that decision?

When I used Android, I just didn’t install things unless I really, really wanted them, and they were popular enough that I figured security researchers would likely be looking at them closely. (Which, of course, was a great incentive to keep using Google’s ecosystem for everything.)

I tried iOS a few years ago, and one of the big differences is that I’m a lot more confident about trying random apps; I know there’ll still be shady apps, but Apple’s vetting and the iOS security model give me a lot more confidence. I’ve installed (and paid for) a lot more apps as a result; my phone’s much more usable to me.

Re:The Death of External Storage: Where's Google? by theon144 on Friday March 29, 2019 @12:01PM (#19522792)
Like, how do you decide which apps to trust on your PC? While Windows does have a store, I'd wager the majority of installs are still done by downloading .exe files off the software's homepages. Executable binaries that run with full privileges, with minimal permission granularity, no less.

Somehow we're not discussing prohibiting filesystem access for personal computers? Why is this an issue for smartphones, a.k.a. a pocket-sized personal computer?

Re:The Death of External Storage: Where's Google? by pjmlp on Saturday March 30, 2019 @05:39AM (#19528610)
Microsoft is slowly migrating Win32 into the store with each W10 release.
Re:The Death of External Storage: Where's Google? by unilynx on Friday March 29, 2019 @01:39PM (#19523835)
Inertia (the mass of already existing unsandboxed software) probably makes securing the (Windows) PC platform a lost cause.

If Windows had proper filesystem sandboxing enforced on applications, ransomware would disappear overnight

Re:The Death of External Storage: Where's Google? by ubercow13 on Friday March 29, 2019 @10:59AM (#19522258)
For example, I largely trust anything on F-Droid and various other open source apps.