Michael TsaiVerified account

@rosyna I’m not sure how the original reason the technology was developed is relevant to the policy decision about using it now.

@mjtsai Because it's never been used to protect against malicious apps. As I said, those apps can always ask the user which files to destroy

@rosyna Apple’s docs says "Enable App Sandbox to Minimize Damage from Malicious Code". https://developer.apple.com/library/mac/documentation/Miscellaneous/Reference/EntitlementKeyReference/Chapters/AboutEntitlements.html …

@mjtsai Yes, malicious code that hijacks and exploits a security vulnerability in your app.

@rosyna Where is that code running? And why wouldn’t it also be able to make the app ask the user which files to destroy, as you say?

@mjtsai the malicious code runs inside the legitimate app. That's how all flash exploits work. A user would notice an unusual dialog.

@rosyna So you’re saying that the reason the Mac App Store requires sandboxing is to protect against Flash, which most apps don’t use?

@mjtsai No, it's to prevent bugs in the apps from being exploited and doing harm to other parts of the system.