There cannot possibly enough friction between an end-user and the video player they just downloaded from a porn site. There is absolutely no reason for every piece of software you run to have access to your entire filesystem except that we didn't know better 30 years ago.
As long as there's a sensible override system that lets users make informed decisions about trust, I can't wait for OSX to converge on the iOS sandboxing model
FWIW, FileVault has been getting better, and recent versions have come with other security fixes like defeating Thunderbolt DMA attacks.
As long as there's a sensible override system that lets users make informed decisions about trust, I can't wait for OSX to converge on the iOS sandboxing model
FWIW, FileVault has been getting better, and recent versions have come with other security fixes like defeating Thunderbolt DMA attacks.