Michael TsaiVerified account

@mjtsai That Wil Shipley update misunderstands sandboxes completely. They are not designed to prevent malware. They are to mitigate exploits

@rosyna A bug from a legit developer is not malware or an exploit. I think you’re misunderstanding what his point was.

@rosyna Why not? Isn’t that part of why the Mac App Store requires sandboxing, as a backstop against malware?

@mjtsai No, it's so the developers can define the resources they need up front. This prevents bugs/bad coding from accessing other resources

@rosyna I don’t remember that being presented as the main motivation. I don’t think anyone’s worried about apps accidentally printing.

@mjtsai That was the only motivation when sandboxing was added to OS X for system services, which was before the Mac App Store existed.

@rosyna I’m not sure how the original reason the technology was developed is relevant to the policy decision about using it now.

@mjtsai Because it's never been used to protect against malicious apps. As I said, those apps can always ask the user which files to destroy