Post #1308467

@paavi @blinry @postmarketOS iOS and Android both have the apps very well sandboxed from each other and this is not something you get in a vanilla Linux OS. e.g., Take a default Ubuntu install. What can you see as a regular user? All the other running processes, open ports... you can access a ton of things which creates a huge attack surface. Every "world readable" file on the filesystem can be read by any other user/app/process, you can send data to any socket you can see. This is just normal Unix OS behavior. Phone apps can't do that on iOS and Android, and a phone should not behave like a desktop/server OS. You know how on modern devices apps have to ask "permission" to use the camera, network, GPS ... or for your photo album you grant access to all your photos or just individual photos... this is not something you can just reinvent overnight. It's a slog to build all of that out. It will take many many years. And in the process we have to invent a whole new "app" ecosystem with new APIs for everything so "apps" don't have full access to your phone. It's gonna suck reinventing this wheel, and the end product will definitely be worse than Android.