Attack vector requires local execution access and allows for escaping limited privileges like non-root user accounts and breaking out of (some?) namespace jails used by containers and sandboxing systems.
On iOS you can't disable functionality in that way.
Objective-C allows dynamic dispatch to private API methods which would be just fine to do on third party app stores.
As I mentioned above the issue is likely related to engines being able to cache the system prompts approvals across multiple PWAs effectively bypassing them.
The third-party browser could just have its own prompt until Apple delivers their API, no?
On macOS, I already have to both grant Firefox permission to access camera, and then Firefox asks me about every website trying to access it individually, using their own UI.
Did you read my comment? You still need to grant the permission to the browser in the first place.
This isn't any different from how it works already for all kinds of apps: If you grant Zoom the permission to access your camera, you do that once, and have to trust it on a per-call basis to not turn on your camera without your explicit consent.
If you don't trust your third-party browser to respect your choice as to which websites you want to grant access to your sensitive data, you probably shouldn't be using it, or at least not grant it access to that data in turn.
How would websites get access to your contacts? Just don't grant access to your contacts to your browser, whatever it is, problem solved!
The same applies to photos. iOS even has an API to let you pick a single photo to upload/share with an app that doesn't grant any access beyond that. And for messages there isn't even an API in the iOS sandbox.
Maybe you could clarify your concern; as far as I understand it, nothing whatsoever is changing on iOS due to the DMA in this regard (and I wouldn't want it to).
I think the concern/problem is you might want a pwa to have access to contacts, but you don’t want to provide contact access to the entire browser in this scenario since you may not trust the browser/other websites.
Nobody outside of the uk knows what a "consumer unit" is. that sounds to me like you can't touch the breaker panel which is what you have to touch to wire in a new circuit.
The concern is that google basically funds firefox, and can choose to revoke that funding at the most inconvenient time for mozilla, risking bankruptcy. Companies ebb and flow on cash flow, and a unexpected drop at the exact wrong moment can cripple even the most well funded ones.
Giving poor people a thousand a month caused them to get more jobs. Giving them 6k up front caused them to get even more jobs.[0] Author's argument is invalid.
Percentage of Participants Working Full-time, Enrollment and 6-month Follow-up:[1]
Looking at the historical maintenance cost of the stacks when choosing them and prioritizing ones with a better history of backwards and forwards compatibility in their ecosystem does far more to prevent tech debt pile up than trying to reach a strict habit of bending over backwards to update dependencies.
Everybody points to uber but uber won against taxis because they had an app and taxis had a phone number that often wouldn't even accept a downtown cross st.
As a seattlite who got tired of hunting for a building that still had a street number just to get a cab on 5th and Jackson or what ever I'm glad uber killed taxis
