Re:New macOS malware steals info, including a user's entire ...
by pcthrowaway on Saturday April 15, 2023 @11:40PM
(#35587060)
> Linux any application also can read any user's file
Surely you mean any root application? Or is my understanding of the Linux security model completely incorrect?
> And in Chrome and Firefox, any extension can read browser history, capture key presses and so on
Also no, extensions have different privileges you must accept. There are lots of problems with that security model, but it doesn't any extension can do those things
In Windows and Linux any application also can read any user's file. And in Chrome and Firefox, any extension can read browser history, capture key presses and so on. If you install Python packages, they can do anything to your computer, if you download a plugin for Gimp the same issue exists. On desktop security is broken since forever. OS developers (especially Linux developers) cannot innovate and use outdated security model from 80s where users are isolated from each other but today most computers have a single user and it makes little sense. Today you need to isolate program from a program, and prevent them from fingerprinting user's device (for example, in Linux any app can read MAC addresses, hardware serial numbers, list of nearby WiFi points and nobody cares about that).