Re:When will we get secure desktop OSes? (2018)
by kebos on Sunday July 25, 2021 @06:07AM
(#27948055)
The article is about sand boxing APIs in the OS. He does mention that app stores are not a solution and gives sound reasons.
Re:When will we get secure desktop OSes? (2018)
by Const-me on Sunday July 25, 2021 @06:26AM
(#27948134)
> The article is about sand boxing APIs in the OS
At the time of writing, all third-party Windows store apps were running inside of such an API sandbox. Windows did not use virtual machines for that, but the sandbox is quite good nevertheless. AFAIK they used CreateRestrictedToken API to implement that.
> He does mention that app stores are not a solution and gives sound reasons.
Despite one can now technically package any Win32 app into the store now, this does not mean there’s no API sandbox anymore. Developers can still code against UWP APIs only, and the OS will use a sandbox for such apps.
Chrome is not a Windows store app. It could have been (MS edge was for years) but it's not. Store apps are substantially more secure than Win32 apps, at the cost of smaller API surface and less permissions.