Hacker News Reader

I wouldn't download anything from the Microsoft App store since it's hard to verify the source.

This is a result of the failed strategy to explicitly not curate it and get as many apps as possible, no matter how bad they are.

I'd like to know what goes on inside of Microsoft for them to keep following strategies that appear doomed to fail from the start.

View on HN

On the other hand, apps downloaded from there are given far fewer permissions on your PC. They are sandboxed to some extent [1].

1. https://en.wikipedia.org/wiki/Universal_Windows_Platform_app...

No, not all apps are UWP apps on Microsoft store. They allow normal installers as well these days.

And it suffers from the same limitations as any other attempts at filesystem sandboxing – it only caters for the simple "open/save one file" respectively "open/save within one folder (plus subfolders)" use cases and ignores (and breaks) the existence of any other workflows.

Win32 applications on the store run with trusted identity, so it allows for a bit more than that.

“This App is provided and updated by X.” I don’t know what more you expect them to do.

Yeah but I'd say the main thread for KeePassXC is not the app accessing your system, it's more about the fake app accessing all your passwords

Reply on news.ycombinator.com