Mandatory Sandboxing to Beef up Mac Security, But Could Ruin Some Apps
November 4, 2011 10:35 AM
comment(s) - last by
For small apps changes aren't any big deal, but for big apps Apple's new mandatory sandboxing could be game over
Great American statesman Benjamin Franklin once wrote, "They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety."
While he certainly wasn't talking about personal computers, that's exactly the dilemma PC makers find themselves in today. After all, allowing apps full system liberties opens a world of intriguing new possibilities -- but also new dangers.
I. Apple Backs Mandatory Sandboxing on the Personal Computer
Some are voicing support for sandboxing, the idea of preventing apps from "talking" to each other, accessing folders outside their own, executing shell commands, or using the attached hardware (without explicit permissions). So far only one company has
embraced such an approach
for its personal computer -- Google Inc. (
), makers of Chrome OS. But sandboxing is about to get a big new proponent as Apple, Inc. (
third largest maker of PCs
in the U.S., is about to roll out the feature on March 1.
For apps that are distributed in retail form or over the internet, developers -- for now -- won't have to comply with the sandboxing restrictions. But sandboxing will be mandatory to all new apps in
the Mac App Store
. Developers will also have to change their existing Mac App Store apps to sandboxed form if they want to post an update.
Under Apple's new sandboxing system apps will be able to request "entitlements", such as access to a web camera, access to USB devices, access to special folders (music, downloads, etc.). While this is similar to how sandboxing is handled in Google's Android operating system, Apple will take things a step further and decide whether the requested entitlements are appropriate as part of the applications submission process.
The new security features will help prevent malware, like the recent wave of trojans sweeping Apple's computers [
Apple wrote developers "the default sandbox environment is as simple as checking [the right] checkbox" in their development environment. For simple apps, that indeed may be all the intervention that is needed in order to assume compliance with the new restrictions. But for power apps, deep debugging, testing, and recoding may be required.
II. Developers Aren't Happy
Developers are upset because they fear that customers won't understand the changes and will simply blame them from removing features which can no longer be implemented under the sandboxing regime.
Some developers are also frustrated at the timing of Apple's decision. They are used to dealing with changes when there's an operating system release, but aren't used to having to make big changes mid-cycle. The latest version of OS X, OS X 10.7 "Lion",
launched back in July
Describes Gus Mueller founder of
Flying Meat Software
, a Mac software company, in
, "It’s being introduced in the middle of an OS cycle. I could see Apple turning it on with the release of 10.8, but forcing the sandbox on developers with a 10.7.x update? That’s crazy."
The changes have some developers considering rebellion -- abandoning the Mac App Store. Even Mr. Mueller a firm App Store proponent acknowledges that the changes "force me to remove one of my applications", the screenshot app FlySketch.
That's troubling because the Mac App Store has already had some struggles to succeed, in the face of
problems like piracy
. Still, it's important not to overstate the reaction -- most developers who use the App Store would be unwilling to turn their back on this
lucrative means of mass distribution
unless they had.
In the end sandboxing should beef up Mac security, although limiting the kinds of apps that can run on Macs in some cases. Developers may enjoy several unhappy months thanks to the decision, but they will likely adapt. After all, iOS -- Apple's operating system for the iPad, iPhone, and iPod Touch -- already implements strict mandatory sandboxing for all apps.
This article is over a month old, voting and posting comments is disabled
11/4/2011 11:05:47 AM
Why don't they just ship with Avast!? It has OPTIONAL promted sandboxing built in. Great feature by the way.
RE: Ahoy matey!
11/4/2011 11:54:17 AM
Comodo firewall as had that feature for way longer.
RE: Ahoy matey!
11/4/2011 4:30:57 PM
OR they could just do what Microsoft did and buy an entire AV company and produce their own free AV.
RE: Ahoy matey!
11/4/2011 4:42:40 PM
Apple: We'll ban that app from our store, include our version of it in the OS, and call it our latest magical feature
"If you mod me down, I will become more insightful than you can possibly imagine." -- Slashdot
"Devil Robber" Trojan Infects Macs, Leeches Their GPUs for Bitcoin Profit
November 1, 2011, 10:59 AM
Apple Unleashes Lion, Revamped MacBook Airs; Plastic MacBook Gets the Axe
July 20, 2011, 8:45 AM
Analysts: Apple Now Has More Than 10 Percent of the U.S. PC Market
July 14, 2011, 1:52 PM
Apple Tries to Roll Out Trojan Protection, Only to See New Variety Pop Up
June 2, 2011, 9:00 AM
As Apple Boasts of One Million Downloads for Mac App Store, Piracy Already a Problem
January 7, 2011, 11:00 AM
Microsoft Wants Windows 8.1 Inside Children's Toys, Appliances
August 20, 2014, 3:20 PM
Report: Windows 9 “Threshold” Tech Preview Coming Next Month
August 15, 2014, 11:29 AM
EA Access Subscription Gaming Service Now Open to All Xbox One Users
August 11, 2014, 4:32 PM
Quick Note: Windows Phone Store Surpasses 300,000 Apps
August 8, 2014, 12:30 PM
China Kicks Symantec, Kaspersky Off Approved Software List
August 4, 2014, 1:48 PM
Nintendo Reports Yet Another Quarterly Loss, Sells 510,000 Wii U Consoles
July 30, 2014, 12:00 PM
Most Popular Articles
Lumia 830 Gets Major Upgrades Including New 20.1 Megapixel Toshiba Sensor
August 15, 2014, 6:00 PM
Windows Phone, BlackBerry Smartphone Market Share Falls to 2.5%, 0.5% Respectively
August 15, 2014, 9:44 AM
GM Concedes That the Cadillac ELR Doesn’t Really Compete with the Tesla Model S
August 15, 2014, 5:42 PM
Cell Phone Thief Calls 911 After Her Victim Chases Her and Her Male Cohort
August 14, 2014, 12:11 PM
Smarter Wired, Wireless Chargers Set to Shake Up Mobile Industry
August 14, 2014, 6:39 PM
Latest Blog Posts
Space Terrorism is a Looming Threat For the United States
Apr 23, 2014, 7:47 PM
Facebook Aims to Provide Internet to "Every Person in the World" with Drones, Satellites
Apr 1, 2014, 10:20 AM
Retail Mobile Sites Experience Outages in Light of Simplexity's Bankruptcy
Mar 14, 2014, 8:48 AM
Tesla vs. BMW: Who Has the Safer EV?
Feb 1, 2014, 2:56 PM
Justice Leaks Details of Next HTC One Two Flagship Phone
Dec 5, 2013, 4:04 PM
More Blog Posts
Copyright 2014 DailyTech LLC. -
Terms, Conditions & Privacy Information