[LINK] RFI: Sandboxing

[Roger Clarke]

There's seldom much of consequence in the Fairfax IT section, but Peter Wells' article on Tuesday caught my eye:
http://www.smh.com.au/it-pro/security-it/os-x-el-capitans-new-security-features-make-apples-mac-more-like-ios-20150720-gifyoy.html

He quotes Marc Edwards, of Bjango software, saying:
"Heightened security always comes at a cost. I'm worried about OS X becoming more like iOS - [1] only one source to install stuff, [2] everything really tightly sandboxed."

I've been working for a long time to escape 30 years of Mac OS, precisely because of the captive, appliance style of iOS, and the ongoing migration of Mac OS in that direction, i.e. Edwards point [1].

But surely point [2], 'really tight sandboxing', is an absolute must, and implemented at OS level (or below) not applications level?

And the fact that it's taken so long to be implemented is an indictment on any operating system (and a *tick* for iOS)?

-- 
Roger Clarke                                 http://www.rogerclarke.com/
			            
Xamax Consultancy Pty Ltd      78 Sidaway St, Chapman ACT 2611 AUSTRALIA
Tel: +61 2 6288 6916                        http://about.me/roger.clarke
mailto:Roger.Clarke at xamax.com.au                http://www.xamax.com.au/

Visiting Professor in the Faculty of Law            University of N.S.W.
Visiting Professor in Computer Science    Australian National University