Isn’t that just deliberate on their part? As in, they genuinely don’t want developers to use these APIs and just allow them for accessibility use cases.
If that were the case, and Apple suddenly decided that no apps are allowed to use the accessibility APIs, so many utilities would just cease to exist, it'd ruin the OS tbh.
You'd lose all window managers, things like alfred and textexpander, screenshot tools, computer use agents, etc.
Given that they could have easily get Steam Deck levels of compatibility with Windows games, but didn’t, I think they’re mainly after the App Store margins for ported games. Having an independent marketplace with tons of Mac-compatible games is a nightmare for them.
Gambling apps. Extremely few of the "games" on App Store are traditional games. Most of them are lootbox puzzle slop because that's what Apple tolerates && most lucrative.
I think the key right now is that these are semi-automated scanning processes. Right now, companies like step security selectively publish. So, in order for a hacking group to find out if their malware is detected or not, they have to burn access to a useful package.
None of this is to say I think Microsoft shouldn't be doing something as part of the release process on NPM. However, there is real value in giving more independent third parties a window to do things semi-manually.
Yeah, this is the part that I don't get. If the solution is "security testing should come before people install it", why is the big push to have people intentionally add this artificial delay to install later rather than moving the security testing earlier to before the release? If you want to make people not drive on the road until the pavement dries, you don't try to convince everyone to push back their workday by an hour; you just lay the asphalt an hour earlier.
It works because there are multiple companies doing it and double checking the results.
For example, is a crypto miner actually an attack? If the package presents itself as a miner, then no. Is connections to other repositories an attack? Again, depends on what the package does. Connections to some other hostname? Depends.
There is still a lot of human analysis that occurs in making the call that an attack is occurring.
Every year half a million children die of diarrhea. There are so, so many people in the world, who are capable of joy and suffering, who "we" don't care much at all. However I have a feeling that "we" might be joining that group eventually.
Still, it’s vastly fewer now relative to the total number of children born than any previous time in human history. It could be even fewer had birth rates begin to drop instantly as a response to child mortality dropping dramatically even in most developing countries, rather than with a few-generation delay.
Yea, and I will take it a step further; it is really easy to start to worry about the “worth of a human life” when it’s yours. When we are in the position to not care about the worth of a human for our gain(such as children working to make iPhones for us to use cheaper) we call it economics.
It's true. But at the same time, isn't it crazy to conclude that a company should restrict their developers from using their own developer productivity tools and services? If Microsoft devs shouldn't use random VSCode extensions, how could anyone?
As Apple shifts towards services and fancy software features, I wonder how do they expect to stay competitive by only releasing them for a subset of languages.
reply