Yet, this is the default behavior for applications on all Desktop operating systems. Until now.
It'll take a while to iron out all the kinks, especially with legacy Apps, but it's the right thing to do.
This makes sense only for 3rd-party apps, but I’m talking about apps that have been notarized by Apple themselves.
Terminal.app comes pre-installed in every Apple computer, it is developed by software engineers who work for the same company that makes the entire operating system. Why do I need an alert asking for permission to execute this command: “cd ~/Downloads/” ? You could argue that you only need to allow this access once and it will carry on for future interactions, but that is not the point. The point is that Apple is focusing on increasing the security of the system the wrong way, these alerts overwhelm regular users to the point they will mindlessly click “Allow” every time an alert pops up, hackers will take advantage of this and assume users will grant system-wide access to their malicious programs.
I was happy with the previous versions of the “Security and Privacy” settings. By default, you could only open apps downloaded from the App Store. However, if you were tech savvy enough you could enable the option to allow apps from 3rd-party identified developers, and if you really wanted to take risks you could enable the option to allow apps from unidentified developers. It was your choice, and the options were “hidden” in the correct place. But today’s operating system is just overly paranoid to the point of becoming an annoyance even for security minded people like me.
The large majority of Mac owners will never intentionally use Terminal. I don't know what it's like in Catalina but I have no issue in Mojave going to Security & Privacy > Privacy and granting Terminal Full Disk Access because I'm one of the few who will be regularly using it. If Catalina is making it clear that permission needs to be granted, that's an improvement over Mojave because the first time I did something that required the Full Disk Access permission, that was not clear to me from the text shown in the shell.
Because differentiating between that command and any command that may be harmful is NP-Hard. Like I said, these kinks will have to get ironed out. Terminal is UNIX legacy and that "security" model was broken from day one. The sooner we get rid of it, the better.
> The point is that Apple is focusing on increasing the security of the system the wrong way, these alerts overwhelm regular users to the point they will mindlessly click “Allow” every time an alert pops up, hackers will take advantage of this and assume users will grant system-wide access to their malicious programs.
You don't get system-wide access, that's the point of asking you for every folder. Let me ask you, what's the alternative to asking for permission? If I accidentally give a malicious program permission to do something, how is that worse than just giving it that permission without being asked?
Turing complete.
I'm not sure if NP-Hard is the right classification for the more restricted case though.
That's what this type of thing is devolving to. It's going to get to the point that most users are simply going to click through without thinking, and those that do pay attention are going to suffer continually.
To be quite honest, I'd pass. It'd just be easier not to keep my life on the bloody computer readily accessible all the time.
Most users already know this behavior from their phones, they aren't all so dumb and reckless. They reject permissions all the time, which we know from statistics. They don't just mindlessly say "YES" to everything, but even if they did, why put everyone at risk, just because most people aren't diligent?
What statistics?