News for hackers. Stuff that matters.
Re:Notarizing Your Mac Software for macOS Catalina by jakelazaroff on Monday October 07, 2019 @11:46AM (#21182236)
Yup, that's why Mac App Store apps are sandboxed. The Mac App Store is the experience we're describing: install an app and use it without having to call tech support or worry about malware.
Re:Notarizing Your Mac Software for macOS Catalina by heavyset_go on Monday October 07, 2019 @12:06PM (#21182498)
> The Mac App Store is the experience we're describing

It isn't if the user wants to use software that isn't available on the App Store.

Arbitrary programs can be run with the macOS sandbox, there is no need for the App Store for security.

Re:Notarizing Your Mac Software for macOS Catalina by saagarjha on Tuesday October 08, 2019 @12:49AM (#21188864)
Very few applications opt in to the macOS sandbox outside of the App Store.
Re:Notarizing Your Mac Software for macOS Catalina by heavyset_go on Tuesday October 08, 2019 @11:08AM (#21193087)
We're talking about an optimal security platform. Apple could very well build macOS security around sandboxd without the App Store, but chose not to.
Re:Notarizing Your Mac Software for macOS Catalina by saagarjha on Tuesday October 08, 2019 @02:45PM (#21195638)
You’re free to use the sandbox outside of the App Store, but the problem is that there is little incentive to do so unless Apple forces you to through App Store review.
Re:Notarizing Your Mac Software for macOS Catalina by heavyset_go on Tuesday October 08, 2019 @03:42PM (#21196323)
I'm thinking of something like QubesOS. Apple could enable the sandbox by default for all applications. There's no need for an App Store.