Thread

1. moecables · 1790972047 · focus · HN ↗

   IMHO, it's good to add more specific controls for this. After reading this, I went and checked my list of app with full disk access:

   - Ghostty (fine, it's my terminal)

   - Alfred (fine, I use it for searching everywhere)

   Then I have a few turned off:

   - Spotify (why does it need full disk access) ??

   - Gemini (nope, don't need it to know everything about my computer)

   1. jeroenhd · 1791015554 · focus · HN ↗

      I haven't tested Apple's access model, but is there something that's stopping Gemini from launching `ghostty -e /bin/sh malware.sh`?

      Windows' Vista-era UAC protections have been bypassed through lolbins since the day of its inception (although officially UAC is not a security boundary according to MS) and apps like Ghostty might punch a hole through disk access controls in the same manner.

Unofficial Hacker News client; not affiliated with Y Combinator.