← Back to context

Comment by tpxl

4 years ago

> even if I don’t know the details of the lock in my door, it will not let others pass through.

You absolutely can not make that assertion without being able to verify the lock.

What if I have a locksmith verify it for me? Like Apple and Android have been checked by several security researchers and while they absolutely have holes, there is are at least gates that can have them. Sandboxing is the bare minimum an OS should do if it wants to have third party applications installed.

  • You can only hire someone to verify your lock if the lock is verifiable in the first place. Apple is trying to make it non-verifiable.

    • Anything concrete on that?

      For a fact we know that ios has strong sandboxing, secure bootchain and apps are revokably verified.

      1 reply →