There are protests everyday you walnut and the administration is using that as a pretense to move in honest to god military troops.

Nearly everyone I know (including my 80 year old neighbor) has been to a protest. You can go to an organizing meeting any day of the week in any neighborhood in the city. We are all walking around with whistles for signaling when ice comes and kids are making them on 3d printers in the library.

Exactly.

The only way is to run everything is strict sandboxes. E.g. for a photo editor there's absolutely no reason to open any network connections.

That exists and it's called web apps. For native apps you need the exact opposite, access to everything otherwise it can't do the useful integrations and provide the best experience for the user, which is the point of native apps.

You have to trust native apps, as it always was the case. You can't just install random apps. You can delegate the trust to a curated lists of apps that you trust.

Or you can just use the web apps, but then you have to trust them too (so they don't misuse information about you or your data for example). But then it can't integrate with anything and many features are simply not available.

As for your example, a photo editor could need a network connection when it contains collaborative features. Or an auto-update system. Or downloading of assets on demand. Or cloud AI feature. Or list of add-ons to install. Or for license checks. Or online help/docs. Or whatever.

I'm building an application that allows you to send a file to your colleagues. That's hardly a revolutionary or unusual use case, and it definitely requires network access and full access to the local file system. I also need the ability to lock files, writing file locks anywhere on the system, and I need to be able to index the contents of files.

Not only are all of these functions and corresponding permissions completely standard for all kinds of applications, they belong to the core of what any system that calls itself an "operating system" should deliver to developers and end users.

So what? Does it mean I need to automatically trust you and your app?

You don't need full unlimited access to everything in order to send a file.

You should definitely not run any apps that you don't trust. It's a no-brainer.

But in the end the file access issue is an operating system deficiency. They could offer more fine-grained access control but the common operating systems don't. It's ultimately a matter of user convenience.

Yeah, but Docker provides pretty good isolation if done right, it's a good start. MacOS sandbox is limited in functionality and poorly documented, but still looks promising.

The only problem is that nobody cares, so there's no evolutionary pressure for OS developers to make their products safer in the sense the applications are safe for user.

Where are all these "Apple can do whatever they want on their platform" bootlickers?

Same thing, I jumped off iOS/macos development long time ago, it was probably the best career decision.

Why is it always "ban something"? Do we have solutions other than ban everything?

The other option is to destroy something

Why is one person resigning == end of community?

But it does work much better, why do you think it didn't?

Yeah, Japanese economy has been quite stagnant since the bubble collapse in 1990. Pretending that their model works is ridiculous.

He sounded pathetic, especially "therefore I declare" that's just ridiculous.

Boss, I declare that you must remove all my code from all our products effective today, because of that coop that easily replaced my 20 years experience and I'm upset about.

So use AI to check AI reports, problem solved.

I cannot tell if you are being serious or sarcastic.

i dunno about problem solved, but id expect to be able to put together an agent that helps requesters format their reports well, and that could run the reproduction steps in a sandbox.

50/50