APPLE SANDBOX STATUS SOFTWARE
APPLE SANDBOX STATUS PC
APPLE SANDBOX STATUS DOWNLOAD
APPLE SANDBOX STATUS MAC

Well, it's more like a range of default security policies tailored to the application, but yes. certification, or a Linux distribution rejecting suid root apps from the default repository. This is like Microsoft requiring applications to work as non-Administrator users for the Designed For. It is not a whitelist of applications, it's just a default security policy that applications must work with. The only difference now is that Apple is defining a sandbox profile for normal applications and forcing developers to use it if they want their application in the App Store.

You can see the sandbox definition that mDNSResponder uses and it's pretty trivial to put something similar together for your own daemon. You can ship your own sandbox policies if you want to implement privilege separation and so on in your OS X application, and a lot of Apple's programs use it already, and have for a while - you may remember a mDNSResponder vulnerability that only affected 10.4, because it ran in a sandbox on 10.5. This isn't an 'authoritarian model' any more than the UNIX process model is: the kernel is the authority and any application has to go begging to it for access to anything.

APPLE SANDBOX STATUS DOWNLOAD

If you download an app and don't trust it, then you can start it in a sandbox (there's no GUI for doing this, which sucks, but it would be a few hours work to add one). This comes with a few default policies, and you can add more. The sandbox(7) man page will tell you a lot about it. OS X has had a set of APIs for sandboxing applications since 10.5. You seem to misunderstand what the sandbox is. Should such a company turn into Big Brother, limit the consumer choice and push it's own interests, the consumers can easily move to a different 'security provider'. I would much rather like to see a sandbox where multiple private companies publish application profiles and the consumer choice is maximized that's a nice role for the AV companies to play, move from a blacklist to a whitelist model.

APPLE SANDBOX STATUS PC

Apple is a control freak: it's profitable and risky, it almost got them killed when the PC revolution happened. Almost everything Apple does is to maximize clout and control over the product environment. It should also be unsurprising that Apple moves to an authoritarian model where it and it alone can act as the trusted 3rd party.

APPLE SANDBOX STATUS SOFTWARE

That Apple is moving in that direction should not be surprising: they make idiot-ready software (also known as good software), and you can't really have security and idiot friendliness without a trusted 3rd party to sort out the nitty-gritty details. It's probably the only way to make our computers more secure. There's nothing wrong with the sandboxing model per se.

It's a great idea! I can't wait to buy one!!.

Of course, the second that Apple announces that they ARE, in fact, locking down the Mac's too, I suspect you'll see one of two responses (should be interesting to see how it goes):

The app store is just for iOS, Apple would be stupid to put it on Mac's.

Just because they do it on iOS doesn't mean they'll ever do it on Mac's.

We'll probably still be able to find a way to jailbreak it, so that makes it okay.

Adobe and other developers would bitch about having to go through the app store and this would stop Apple from doing it.

They depend on the creative crowd that would never tolerate being locked down like that.

They would never isolate developers like that.

I'll summarize the responses you're going to get: I've made the argument that this is exactly where Apple is headed for a long time now.

APPLE SANDBOX STATUS MAC

All that is needed after this to turn your Mac into an appliance is to only allow app installations from App Store.

Apple sandbox status