What I find odd about people arguing for just giving every app network access is that we don't do this for anything else.
Generally security means thinking about worst case scenarios and actual technical capabilities. If you go with the "but it's fine for most apps" line of reasoning you might as well give everyone access to the whole file system, because "most apps aren't gonna steal all your files"...
Tobias Bernard /
npub1ne…7ypfa
2024-03-26 10:41:58
Author Public Key
npub1ne0g36asrqkc8p8jl5aqjned0vk0rkwjycw86gslrkra9vf70p0sj7ypfaPublished at
2024-03-26 10:41:58Event JSON
{
"id": "a757f747a9b3f23dfa540e8c087bdbadce2541ec3bbd8754e2aa98bdb0c49ab6",
"pubkey": "9e5e88ebb0182d8384f2fd3a094f2d7b2cf1d9d2261c7d221f1d87d2b13e785f",
"created_at": 1711449718,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/tbernard/statuses/112161568779698266",
"activitypub"
]
],
"content": "What I find odd about people arguing for just giving every app network access is that we don't do this for anything else.\n\nGenerally security means thinking about worst case scenarios and actual technical capabilities. If you go with the \"but it's fine for most apps\" line of reasoning you might as well give everyone access to the whole file system, because \"most apps aren't gonna steal all your files\"...",
"sig": "f619eb76b0df8726de6951ea1452f886cf9bb1adfe0e7c3e967376076f493b32cbce2a3b1c209be90db533d39415368fb48b27715e924abf9ce681702857af08"
}