Top
Best
New

Posted by chalmovsky 4 days ago

Samsung Magician disk utility takes 18 steps and two reboots to uninstall(chalmovsky.com)
336 points | 181 comments
didgetmaster 6 hours ago|
I worked on a disk utility in the 90s called PartitionMagic that was one of the first ones to let you dynamically resize disk partitions.

Maybe Samsung used that when naming their product.

I am old, but I miss the days when the install process was copy . to /<appFolder> and the uninstall process was delete /<appFolder>

throw0101c 1 minute ago||
> I am old, but I miss the days when the install process was copy . to /<appFolder> and the uninstall process was delete /<appFolder>

.app 'files' on macOS are like this.

GeekyBear 5 hours ago|||
When a user mode application on the Mac doesn't just allow you to drag the app into the applications folder to install, it's a red huge red flag.

Personally, I'd look for another alternative from a company that better understands the Mac.

Chrome, for instance, previously used an installer that had to run with administrative permissions and famously ended up rendering systems unbootable.

System utilities and drivers are the exception, since they have to modify system folders to install.

Partition Magic was pretty awesome, BTW.

post-it 4 hours ago|||
I started developing for my Mac a few weeks ago and I'm blown away by how easy it is to make an app that feels Mac native and includes quality of life features like CloudKit sync across all your devices. It's become clear that most companies don't give the tiniest shit about any of that.
xp84 4 hours ago||
It's obvious why they wouldn't give a shit about that, though - the Mac is not their main focus. Most companies that make software for PCs are obliged to make at least Windows and Mac versions, and to build an application "The Apple Way," using SwiftUI, and things like "CloudKit" etc. would mean a whole dedicated Mac-experienced design team and Mac-experienced engineering team. This would result in an app that fundamentally works and behaves differently than their app would on Windows, because these operating systems have different conventions and standards.

Now, that would make people like you and me very happy -- but consider it from the big company's perspective. Now instead of supporting a piece of software which has a single set of features and a single consistent (and 'braaanded,' eyeroll) Electron UI (and, mostly, a single set of bugs), you're supporting two completely different apps with completely different UIs. Building a new Important Feature means building it from the ground up twice, and QAing it twice. And customer service needs to be trained to walk customers through both of these different apps which work differently, and some of the customers are so confused, they can't even tell you if they're on a Mac or not.

25 years ago, before cross-platform frameworks existed (other than Java, which wasn't often used to these ends then), that was sort of how they had to do these things, and in practice, the results were either that a ton of hardware shipped with no Mac support whatsoever (wasn't worth it) or with a bare-bones Mac version on the CD that was incredibly low-effort, and clearly still written by people who barely knew how the Mac was meant to work.

This very real phenomenon is why we are cursed with cross-platform everything. The difference between a single cross-platform codebase and even two dedicated good-citizen apps is a vast chasm.

asdff 1 hour ago||
>This would result in an app that fundamentally works and behaves differently than their app would on Windows, because these operating systems have different conventions and standards.

Not always the case. Sometimes the gui app is just wrapping some script written in a general purpose language. Button just calls a function. Yes writing the function to draw the ui button element might take a different syntax, but they might go on to run the same underlying function.

At least that is how I like to write my gui software.

vbezhenar 4 hours ago||||
Mac apps often do various things on your computer. Just because you dragged it to Bin, doesn't mean there are no leftovers on your computer. I'd prefer proper uninstaller any day.
asdff 58 minutes ago|||
If you are aware of this not hard to manage. Grep. rm -rf. Done. Usually its pretty tiny folders at least. Heavier stuff usually software makes a directory under Documents. Kinda nice in a few cases having it set up like this. For example I can delete the app but preserve my config. Drop the app right back again and no setup its turnkey and works.
fragmede 35 minutes ago||
grep for what? How am I supposed to know that the Foo app installed stuff under ~/Libraries/Application Support/com.bar.corporation?
collabs 3 hours ago||||
> Mac apps often do various things on your computer. Just because you dragged it to Bin, doesn't mean there are no leftovers on your computer. I'd prefer proper uninstaller any day.

I think I know what you're talking about. There are likely files inside the ~/Library/Application Support/ or ~/Library/Caches/ folders for example.

What is the proper, Apple way to make sure these get deleted when we delete apps? Because I fear there is no universal solution here. There are some files that an app creates that some of the time I would probably want to persist uninstalls. But then these files should be in a user home directory, not in application support according to XDG, right? I feel like the OS should detect dragging of an app to the trash can and clean up its app support folders? I don't think it does this today but I think it should.

pndy 3 hours ago||
It wouldn't be hard to display "remove configuration and cache files?" modal during uninstall/trashing process. But it would be hard to go against own simplicity of platform usage idea - that's the problem.

KDE's Discover after you uninstall a flatpak application shows small infobar (still really easy to miss) saying "appname is not installed but it still has data present." with "Delete settings and user data" button.

But then, all sort of software even on Windows leaves some kind of traces of own presence.

In a perfect world we'd have a standardized application uninstall procedure - either by dropping icon on trash (which is something still many people do - especially on Windows) or by bringing similar to mobile solution with "x" on longer click. All of this controllable by options for advanced users including optional configuration and cache files removal.

GeekyBear 3 hours ago||||
Are you under the impression that Windows uninstallers don't leave files and registry settings behind?
vbezhenar 2 hours ago|||
They certainly can clean everything after them. And I'm pretty sure that many of them do. When macOS user drags application folder to the Bin, application does not have a chance to clean after itself.

Just because some Windows uninstaller are bad doesn't mean that all of them are bad, or that uninstaller concept is bad.

Now I'd welcome for operating system to be built in a way to let user to delete everything related to the application. Maybe android or ios are built this way, but not macos.

fragmede 31 minutes ago||
apt purge software on Debian does a pretty good job of that, but it's got limited adoption.
PearlRiver 2 hours ago|||
I use this

https://github.com/Klocman/Bulk-Crap-Uninstaller

The nice thing about Windows is that people have been writing software for it for decades. A very underestimated advantage.

SpaceNugget 1 minute ago|||
Sorry an advantage over what? What desktop operating system in common use _hasn't_ had decades of development of pet projects on obvious problems like system cleanup? Literally every operating system has these kinds of things
GeekyBear 2 hours ago|||
> The nice thing about Windows is that people have been writing software for it for decades. A very underestimated advantage.

AppZapper has been doing the same thing on Macs for decades.

https://www.wikipedia.org/wiki/AppZapper

ValentineC 1 hour ago||||
I use AppCleaner: https://freemacsoft.net/appcleaner/

Raycast has a built-in uninstaller as well.

sunnybeetroot 1 hour ago||
Pear cleaner is the successor, you’re welcome :)

https://github.com/alienator88/Pearcleaner

ValentineC 49 minutes ago||
What's new with Pearcleaner? I don't see a comparison chart in the GitHub repo, and I don't care for features other than completely uninstalling an app.

AppCleaner still works fine for me in Sequoia.

pjmlp 3 hours ago||||
Same applies to Windows or UNIX based packages, other than systems like iDevices, Android or UWP, where applications are sandboxed.

However people around here hate sandboxing on their OSes.

didgetmaster 48 minutes ago||
This problem has been around for decades. An application installer doesn't just copy some files to a few directories. It may put them in hundreds of different places. In addition, it adds entries to the registry or other system files. Even the best uninstallers or cleaners miss something when deleting the app.

This is one of the many issues my side project is designed to address. Imagine if installing every application meant just dropping it on the computer. The software 'package' was just a list of data objects the comprised all the files, config settings, etc. Needed to run the app. All these objects would be copied to the storage drive(s).

Imagine further, that the operating system did not have a central registry. Instead, all configuration was managed via a set of configuration objects, spread all over (preferably in the app folders). The configuration manager was just a program that could find every configuration object and make them appear to the user (and the OS) like they were in a unified file.

If a configuration object was copied anywhere in the system, it looked like its contents were just appended to the configuration store. If you deleted an object, all its settings just disappeared.

Uninstalling an application would mean just deleting all the objects in its package. The files would be gone and any configuration settings with them.

This is just one of the features my 'file system replacement' project is designed to handle.

jdeibele 2 hours ago||||
Me, too.

There is Mac Cleaner https://freemacsoft.net/appcleaner/ which does a good job of removing preferences as well as the application.

smallstepforman 2 hours ago||||
Haiku package system has an unparalleled installstion, deletion, boot into previous states, data integrity (read only packages) and dealing with conflicting library policy. Its a technical crime that other systems are not copying Haiku packages … they’re several decades behind. IOS is half way there …
itsdesmond 3 hours ago|||
I got bigger problems.
everdrive 5 hours ago||||
>When a user mode application on the Mac doesn't just allow you to drag the app into the applications folder to install, it's a red huge red flag.

And the companies that make such products _never_ care about making sure an uninstallation is actually clean.

ryandrake 5 hours ago|||
"Does it have a way to uninstall, and does that uninstallation clean every application artifact?" is such a great litmus test for just how much a software company actually cares about having a proper finished product that respects the user. Nobody forces a company to do it, but when they don't do it, you can probably bet that they're cutting corners and disrespecting the user's machine in other ways, too.

It's like "Do you return your shopping cart to the cart storage or leave it in the carpark?" You're allowed to just shove your cart away and drive off, but people who do that are highly probably assholes in other ways, too.

GeekyBear 3 hours ago||
Well said.

I would add an appreciation for companies producing non-bloated, native software.

al_borland 4 hours ago||||
In the file menu of the installer, there is generally an option to see all the files it is placing on the system with full system paths. I generally note this down so I can make sure to clean things up completely if/when needed.

For app that just get dragged into the Applications folder, they end up doing all this additional file creation on first-launch instead of via an installer. That actually makes it harder. For those I tend to search the ~/Library folder for the name of the app and the company that made it, hoping I find all the remnants to delete. There are apps, like AppZapper and AppCleaner, which try to automate this process. I still think it’s ridiculous that Apple never solved for this. It’s one of the reasons I always do a manual migration to a new Mac. It feels like the only real way to clean things up.

Someone 2 hours ago|||
> I still think it’s ridiculous that Apple never solved for this.

I think that problem, in general, is unsolvable on the Mac. The OS cannot know whether a file that an application creates is a user file that should be kept on uninstall or an application one that, maybe, should be deleted on uninstall.

(Maybe because Apple’s guidelines say (or at least used to say) uninstall ers, if you have one, should keep preferences files around, in case a user reinstalls the app later. Also, applications may ship with files (e.g. fonts, sounds, picture libraries) that users may want to keep around)

> For app that just get dragged into the Applications folder, they end up doing all this additional file creation on first-launch instead of via an installer

For quite a few things that an installer can install, applications cannot do that, as they want to install them into protected directories.

I think most of the leftovers whose locations you cannot gauge from looking at the file list in the installer are for caches, preferences, logs, etc.

xp84 4 hours ago|||
I'll have to check that installer trick the next time I use one.

Isn't the "Receipts" folder that so angered OP kind of that same thing? I thought those included the list of files installed.

In general, I think some worries about removing "every trace" are overblown, though. The receipts, for instance, are inert and they're not filling up the disk or consuming RAM.

Of all the things Apple does in the name of "security" it's funny to me that they've never even tried to build uninstallation functionality. Even though a majority of apps with "Installers" use, not arbitrary installer executables like Windows, but .pkg files that open with Apple's "Installer" app. That means it's Apple's code placing most of those files in place, and even if the install includes a "script" portion, it seems like a solvable problem that Installer.app could monitor the files being added or changed by the script process, to at least let you view a log of what happened if not reverse the changes.

prerok 1 hour ago||
There are two cases: I am uninstalling because I never want to use the app, or I am uninstalling because I know I currently don't need the app and will reinstall after 6 months when I do.

An example of first is a trial of an app but you don't like it in the end, an example of the latter is a game that you might want to play with the same settings later.

Now, I want the option. In the first case I don't want these inert files taking up disk space and in the second I want to have those files.

eviks 4 hours ago|||
Almost never, indeed, so you need some 3rd party trash utilities with databases and heuristics. Though that's also on the gardener and his bad OS design where forced compartmentalization is's trivial, the weeds will never want to root themselves out!
Aurornis 4 hours ago||||
> When a user mode application on the Mac doesn't just allow you to drag the app into the applications folder to install, it's a red huge red flag.

The applications you drag to the Apps folder can do the same things when you run them the first time.

Being able to drag into the Apps folder doesn’t mean it won’t do things outside of that folder.

sneak 1 hour ago||||
This application is a custom one to use custom features on specialized hardware. There are zero alternatives.
longislandguido 4 hours ago|||
> When a user mode application on the Mac doesn't just allow you to drag the app into the applications folder to install, it's a red huge red flag

But a lot of Apple first-party applications require installation. Packages for me and not for thee.

As do Chrome/Edge/Teams/Etc

It's 2026 and Apple still doesn't have an equivalent to MSI + the Add/Remove Programs control panel Windows has had for 30+ years.

Windows always saves a copy of the uninstaller package stub so if you trash the media you can always nope out (usually—unless the developer went out of his way to break it).

And no, the App Store is not a fix-all for this.

ncr100 3 hours ago|||
[ Thank you for "PartitionMagic" - crucially important for home / personal computer users, at least in my own history. ]

And, I wonder if a (corporate) development organization's overall cultural friction around critical / negative feedback -- in this case integration issues in the technical sense of pulling together modules built by subteams to compose a final product -- could be worth investigating when challenging metrics like the above are identified?

This "18 steps" seems like a problem. And I wonder if it's a prioritized concern at SAM.

SNARK: The "magic" could be how corporate culture is communicated to users merely through usage of Samsung Magician.

didgetmaster 2 hours ago||
Thank you and to all the others who remember and liked PartitonMagic. It makes an old programmer feel good to know that something he worked on 30 years ago made a difference.

BTW: I am currently working on a hobby project called Didgets. It is an object store that does a lot of cool file system stuff and relational table manipulation and analysis. It is available for free download at http://www.didgets.com

The install process is to unzip the downloaded file to a directory. The uninstall process is to delete that directory.

zemvpferreira 1 hour ago|||
PartitionMagic was one of the first programs to make me feel like I was in control of my computer. I don't think about it much but looking back it was an important part of my development as a technologist. You made a difference in lots of lives I'm sure!
10729287 20 minutes ago||||
What a blast from the past. Partition magic was a huge part of our journey discovering and loving computers here with my friends. Hello and thank you from France !
DougN7 2 hours ago||||
I LOVED Partition Magic. It really was magic!
ahartmetz 1 hour ago||
It was pretty important at the time to make room for dual-booting Linux. Linux setup tools couldn't do it back then, particularly shrinking FAT let alone NTFS filesystems. PartitionMagic made it super easy. It felt slightly wrong to need a Windows software to install Linux, but great tool.
didgetmaster 42 minutes ago||
I joined the startup making PartitionMagic after I saw a prototype. I had just wasted another half day repartitioning my 80MB hard drive so I could dual boot OS/2 while working at Novell.
krsw 1 hour ago||||
PartitionMagic saved me so many times. Fantastic software to fix whatever Disk Management broke.
whatsupdog 3 hours ago|||
PartionMagic was not A disk utility, it was THE disk utility!
didgetmaster 3 hours ago||
I also headed up a disk imaging product for the same company called Drive Image. It wasn't quite as popular, but it was fun to develop as well.
user3939382 3 hours ago||
You were competing with Norton Ghost at the time IIRC. Partition Magic was an amazing piece of software. It was so good when you explained “called Partition Magic” I was like “called”? It was so clearly the best of its kind it didn’t even occur to me that these years later people wouldn’t know of it, it felt like reading “I worked on a search engine called Google”. Anyway thanks for the great software.
didgetmaster 3 hours ago||
I mainly mentioned it that way because once the company (PowerQuest) was bought out by Symantec, the product was mostly abandoned. Unlike Google, most programmers younger than 30 have never heard of it.
EliRivers 1 hour ago|||
Thank you for PartitionMagic. In the late nineties I cut my teeth repeatedly building and breaking windows PCs. PartitionMagic was a core tool. I regularly see its echoes today in GParted.
acheron 3 hours ago|||
I read the HN title and literally thought to myself “‘disk utility’? What, like PartitionMagic?”

Then this was the top comment.

Thanks for PartitionMagic; what a great program.

wrxd 1 hour ago|||
Partition Magic was indeed magic. Thanks for the great work you did on it!
VMG 40 minutes ago|||
blast from the past - peak of UX!

https://de.wikipedia.org/wiki/Norton_Partition_Magic#/media/...

postalcoder 4 hours ago|||
> I worked on a disk utility in the 90s called PartitionMagic

PartitionMagic was a S-Tier windows utility. Thank you.

pimlottc 2 hours ago|||
PartitionMagic was in every geeks toolbox back in the day, amazing and always reliable, saved so much time! Thank you!
alkz 2 hours ago|||
Oh I used that all the time, it was so awersome! back in the day it really felt like magic...
harikb 1 hour ago|||
Thank you for PartitionMagic!! I remember using it to undo whatever disk partitioning mistake I did when originally setting up a machine :)
Sarkie 5 hours ago|||
Thank you for such a great product
didgetmaster 4 hours ago||
Glad you liked it. I still have fond memories of working on it.
riffraff 6 hours ago|||
I remember that! It was awesome!
kaonwarb 5 hours ago||
Ditto. Worked perfectly and nice UI. Great work!
natebc 4 hours ago|||
hey, thanks for partitionmagic, it was amazing.
shantara 4 hours ago|||
Partition Magic was among the first utilities recommended to me by my more experienced water I got my first PC. It served me well for many years since!
colechristensen 5 hours ago|||
Lots of Mac software is still like this minus possible leftovers in a few other folders for uninstall.
izacus 4 hours ago|||
> I am old, but I miss the days when the install process was copy . to /<appFolder> and the uninstall process was delete /<appFolder>

I don't remember this ever being the case, even in times of DOS.

embedding-shape 4 hours ago|||
I remember software, tools and some games shipping like this forever, typically they have a "portable" label slapped on them, bet you can find Windows software/games still shipped like this today, if you look for "-portable" or "-archive" rather than "installer".

One quick example, offers an installer or a ZIP archive, the "installation process" for the ZIP archive is basically "copy files out from archive && ./executable", installer does a bunch of other stuff: https://www.openttd.org/downloads/openttd-releases/latest

izacus 3 hours ago|||
Yes, but that was never really a default. Even DOS software came with installers and messed with AUTEXEC.
embedding-shape 3 hours ago||
Sure, but it was (and still is, in some circles) relatively uncommon. I wouldn't claim "that was never the case", unless if you're only talking specifically about DOS I suppose.
maccard 4 hours ago|||
It still is for a lot of Mac Apps. You download a DMG, and you get somethinglike [0] where you drag the icon over, and it installs. The last app I uninstalled also removed the matching Library Support folders, which was neat!

[0] https://stackoverflow.com/questions/8680132/creating-nice-dm...

rvba 5 hours ago||
Windows is the same now.

Due to "new and better" approach, each program puts its data in 5 different folders for "multi user" reasons.

What is infuriating that all those folders are hidden and all of them are on C: drive. So your C: drive gets clogged.

This makes it impossible to track how much space each program uses.

(On a side note its been years since floppy drives were the A: drive... and yet we are still stuck with the primary disk being called C:)

mikestew 3 hours ago|||
On a similar note, I wondered if my week Mac still called the main volume “Macintosh HD”. Yup. When is the last time Apple marketed their computers as “Macintosh”? And when’s the last time they sold one with a “hard drive”?
dylan604 5 hours ago||||
> (On a side note its been yeara since floppy drives were the A: drive... and yet we are still stuck with the primary disc being called C:)

The logic behind that is pretty obvious isn't it?

thesuitonym 41 minutes ago|||
If you plug a USB floppy drive in, and put a diskette in it, it's still A:.
klez 5 hours ago|||
Unless you mean retrocompatibility, no it's not that obvious to me.
maccard 3 hours ago||
I think it's clearly back compatability.
ryandrake 5 hours ago||
> I shut down my Mac. Held the power button. Booted into Recovery Mode. Opened Terminal. Ran csrutil disable. Rebooted. Opened Terminal. Deleted the kernel extensions. Ran find to confirm they’re gone. Shut down AGAIN. Booted into Recovery Mode AGAIN. Ran csrutil enable. Rebooted AGAIN. All this just to delete four dead files and their mirrors from a disk utility.

This one is entirely on Apple. It was Apple who decided that "root isn't good enough" and that you, the user, shouldn't be able to administer your own goddamn system as root, without performing backflips while singing Happy Birthday.

gchamonlive 49 minutes ago||
But the system is proprietary, it's not yours. I don't get it with apple users. It's fine to purchase apple devices, they are gorgeous, well built, stellar performance and the UI is nice. But they never promised to keep an open system and to give you access, so why expect it? Even if you had an specific liberty with the system before, you were never entitled to that feature you lost after an update because the system just isn't yours.
Aurornis 5 hours ago|||
You can just turn that off once and leave it off if it bothers you.

Even most power users leave it on except for temporary situations like this because it’s a helpful security protection.

kstrauser 4 hours ago||
Yup. I leave it alone. As much as it’s a hassle every 2 years or so when I need to do some voodoo on my laptop, it’s even more of a hassle for potential attackers. For me, for my risk profile, I believe it has a good return on investment.
stainablesteel 1 hour ago|||
i get this is annoying, but any of this supposed to be some kind of safety measure for users against malicious actors?
sneak 1 hour ago||
This is 100% by design and 100% a good thing. “root” aka uid=0 should NOT have unlimited privileges to permanently modify the deepest parts of the OS, as assuming uid=0 is done daily for routine operations. Modifying kernel level stuff should not be possible from this daily use privilege level. It’s an ancient holdover from unix time sharing systems that are approaching a hundred years old.

If you think it’s bad, you don’t know why it was built - google Chesterton’s Fence. You, the user, still have 100% ability to modify your system however you choose - if you first clearly indicate that you ARE the user, and not just some random-ass installer running under admin privs, which is a completely normal and common occurrence. A higher privilege level that is used to protect OS integrity is a wonderful thing. If you think there is a better or safer way to access it, please submit your suggestions to Apple, but don’t assume the guardrails around System Integrity Protection (1TR etc) are slapdash or unreasonable or poorly thought out.

gwbas1c 5 hours ago||
Years ago I shipped a MacOS product. If you deleted it, you would get an error emptying the recycle bin (or force-deleting the application bundle if you did an rm -R to it.)

Why? Well, at the time Windows Explorer had an API for extensions, but MacOS didn't for Finder. We needed to add some menu items to the context menu, which on MacOS required reverse engineering Finder and injecting code into it. This then meant that Finder had an open file handle into our application bundle until you either restarted Finder or restarted MacOS. Then, as long as you didn't start our application, you could cleanly delete it. (Thankfully MacOS cleaned this up with the Finder extension API about a decade ago.)

Having gotten familiar with internals of both Windows and MacOS... MacOS has its own set of gremlins too.

dcrazy 34 minutes ago||
Shell extensions are the single most common cause of Explorer crashes according to Raymond Chen.

When you realized that Mac OS X didn’t have an equivalent API, did you perhaps consider that it was for a good reason and that you should redesign your application to fit the conventions of the system? How did you conclude that your UI was oh so special that it deserved horking up the Finder experience for your users?

Someone 4 hours ago|||
I don’t understand. Any MacOS Finder that had an open file handle into an application bundle runs on the Unix version of MacOS, and that allows deletion of open files (the inode stays around until the process exits), doesn’t it?

Or did/does the Finder check whether to-be-deleted files are open? Or did I forget how older Mac file systems behaved?

ksherlock 27 minutes ago||
If "years" means decades, it would have been classic MacOS which played by a very different set of rules.
Rohansi 5 hours ago|||
> MacOS has its own set of gremlins too.

You can't really blame macOS for this one. Interesting to hear this isn't just a Windows thing though.

gamblor956 3 hours ago||
You really can, considering that a Windows program would not have had that issue.
devnullbrain 5 hours ago|||
You seem to be blaming the OS for how you broke it?
Aperocky 5 hours ago|||
As a mac user for 10+ years that cycled about 7 macs for personal and professional use, I've used Finder about biweekly to click on the airdrop button..
sheiyei 3 hours ago||
Please enlighten me on the alternatives (I hope it's not just iTerm2)
Shank 6 hours ago||
I think the most obscene thing here is that macOS is now littered with permission prompts for camera, background execution, etc, but makes no effort to stop even industry partners from spraying the disk with dozens of files that can’t be removed easily.
functionmouse 6 hours ago||
That's because this particular sort of cyber security is merely theatrics with the goal of reducing user agency and increasing paranoia and vendor lock-in. The user facing friction is the goal. There will always be scams and viruses; the only practical outcome will be that you have less control over your computer, and Apple/MS/Google have more. See: Sideloading, Wayland, UWPs, iOS JIT, Windows XP and 7 still being used for accessibility
nerdjon 6 hours ago|||
I strongly disagree.

I often have apps on my Mac or iPhone that ask for permission to see my camera, microphone, contacts, etc etc that I don't want it to see. But I do want other apps to be able to access those things.

Being able to stop those apps from accessing before they do instead of trying to fix it after is incredibly valuable.

Sure some users just accept everything, but that is not an argument against them existing in the first place.

alpaca128 4 hours ago||
Those examples are very reasonable. However I also had Mac OS suddenly treat all m4a files on the system as potential malware and it blocked any attempt at opening them. Why did it do that? Because I checked the "set as default app" option, one minute after I had already opened the same file using the same application. The only way to open the files was by entering the password in the settings app each time - but re-setting the same app as default in the file's Get Info dialog got rid of that "protection" system-wide without any password prompts or extra permissions. I don't see how that was supposed to help with security.
ryandrake 5 hours ago||||
We are moving away from the old world where you can trust the applications you are running on your computer, to today's world where you can't. The unix permission model is based on apps running as your user having access to every device and file you, the user, have access to. The threat was "other system users trying to access your files and devices" but now the threat is "applications you run trying to access your files and devices." OS vendors have been slow to adapt to this new threat model.

Even today, any rando application I download and run can read and/or write to any file on my system that I own and have permission to read and/or write, unless I go out of my way to run it in a chroot, a container, a jail or whatever. That's just poor security in a world where nearly every commercially developed application is an attacker.

dcrazy 31 minutes ago|||
macOS now implicitly sandboxes your Documents, Downloads, and Desktop folders. Random apps can’t read from those locations without triggering a security prompt.
AlienRobot 43 minutes ago||||
To be fair, this is partly because of the internet.

If you install random apps and it destroys your PC, you can fix that by having backups. By contrast on work computers with important data, everything is supposed to be locked down and you can't install random apps. But then we started to increasingly connect devices to the internet.

Now gaining access over a smartphone essentially means being able to send payments via the banking apps. People are sending money with crypto so they are susceptible to simple clipboard swap attacks that are almost impossible for the user to detect until it happens. Then there is all the personal data that can be stolen that can be used for other attacks in the future.

Essentially the amount of damage you can take by losing access has increased much faster than the security devices meant to prevent.

To make matters worse, the security devices that are marketed to the average user tend to be exploitative rather than trustworthy (e.g. OneDrive).

It feels like instead of protecting users developers seem more interested in creating something that only does half of the job and then blaming the user for not knowing how to do the other half, so a comprehensive solution for the problem is never created.

ryandrake 27 minutes ago||
I think there are a lot of things that users can be protected from:

1. Protect users from attackers external to the computer

2. Protect users from attackers who are other users on the computer

3. Protect users from applications run by other users on the computer

4. Protect users from applications they themselves run on the computer

5. Protect unprivileged (non-root) users from their own actions

6. Protect privileged (sudo/root) users from their own actions

OSes have been historically OK at 1-3. Not great or even good. There have been a lot of remote code vulnerabilities and local vulnerabilities over the years.

OSes have pretty much ignored 4 until maybe a decade ago, and are making token progress toward it, but I don't think many of them take it very seriously.

OSes have instead started to crack down on 5-6, which I'd argue isn't even the job of an OS.

anthk 4 hours ago|||
Namespaces in 9front (actual ones, not second hand ones like under Linux) makes isolating software trivial.
perching_aix 1 hour ago||||
> this particular sort of cyber security is merely theatrics with the goal of reducing user agency

Literally all security features carry the hazard of being used for oppression and being ineffective or counter-effective. That's how constraints work.

You need two things for a security feature:

- a segmentation under which a behavior is considered unsafe / unsecure (arbitrary, subjective)

- a technical solution that constrains the behavior of <thing> in <usage context> so that the aforementioned is mitigated

So something being "a tool of oppression" or "a tool of safety" is a matter of your alignment with that segmentation. And it being a theater or not is a matter of functional soundness given a threat model. So is its tendency to become counter-effective.

Constraints are just constraints. Whether they're effective and whether you're disadvantaged by them are both separate, independent matters. Empirical too.

Zak 4 hours ago||||
I think we're on the same side in principle. The ability for people to interact with the wider world using general purpose computers that they fully control should be sacrosanct, and attempts to interfere with that such as remote attestation, app store exclusivity, and developer verification are evil.

Sandboxing apps by default is not that. The principle of least privilege is good security. If I vibecode some quick and dirty hobby app and share it with the world, it's better if the robot's mistake can't `rm -rf ~/` or give some creep access to your webcam.

The user should be able to override that in any way they see fit of course.

lpcvoid 5 hours ago||||
>Wayland

I can see the rest, but why did you mix in Wayland, a open source display protocol?

grufkork 3 hours ago||
I think there's some controversy regarding that programs are limited in what extent they can access each other. You need sudo to do global hotkeys/keylogging, probably accessing pixel contents of other apps, etc. I suppose they mean it only prevents some specific threats while leaving open goals in other, even more easily exploited places
Kaliboy 5 hours ago|||
Maybe I don't understand your point, but why is Waylabd in your list?
404mm 5 hours ago|||
It’s like they went backwards on this. The utility that handles .pkg files used to have a command line uninstall option.

Anyway, I kinda like PearCleaner for removing the cruft. It’s not perfect but it’s open source and one of the better options imo.

SilverElfin 5 hours ago||
You often cannot even tell what the permission prompts are for. Sometimes they have generic names like a programming language is requesting something. Not sure what that’s about.
milkshakes 5 hours ago||
those are interpreters, the language is interpreted by a binary called `ruby` or `python`, for example, so that happens to be the process that's requesting the permission
freak42 4 hours ago||
For personal reasons I am avoiding all Samsung products and over the years it seems like I unintentionally dodged one annoying issue after another.
SV_BubbleTime 4 hours ago|
My in-laws bought a Samsung TV, and I swore them off when I saw ads on the menu.

Then I stayed in Hawaii for a while and my rental had a Samsung washer… it had a DOWNLOAD setting on the dial so I could hook up the app… for… washing clothes… it didn’t clean anything, it had a minutes long process of shaking my clothes about to get a feel for them before it bothered adding a lady’s thimble full of water… nope. I had never missed my speed queens so much.

Then I was at a big box store and their Samsung fridge with a tablet on the door locked up and hung.

That was three personal strikes.

thisago 4 days ago||
It's comic when reading but for sure this is tragic. I _have a feeling_ that bloat will continue increasing in the next years.

It makes me wonder why did large companies are investing so much in web and putting web devs to write disk utility desktop apps?

applfanboysbgon 7 hours ago|
> It makes me wonder why did large companies are investing so much in web and putting web devs to write disk utility desktop apps?

It's because in these environments where corporate cancer has metastasised, programmers are not in charge of hiring programmers, or much of anything when it comes to decision-making really. HR is composed of people who are not programmers. They are looking to hire people with a list of shiny hot new web stack keywords on a resume, because they have literally no other concept of how to filter candidate applications. So they end up with a bunch of hot React devs and nobody capable of making software that is fit for task.

adrianton3 6 hours ago||
I don't follow - why do you think HR would be interested in shiny hot new web stack keywords over anything else?
applfanboysbgon 6 hours ago|||
To a non-developer, every application they read might as well be a list of buzzwords. They cannot comprehend a word of it. Web stacks offer the opportunity to list more and newer buzzwords. Do I set up an interview with the person who lists "C systems programmer" or with the person who is a "full stack React, Tailwind, Next.js, Node.js, Electron, Docker, Kubernetes, AWS engineer seasoned in Javascript, Typescript, HTML, and CSS"? Well, the latter certainly sounds 10x more impressive. Into the trashbin the systems programmer application goes, they just don't have enough skills for an enterprise of our scale!
adrianton3 3 hours ago||
A C systems programmer can definitely make a list of buzzwords as well.

Also, let's say team A (10 C app/systems programmers) in a company asks HR to look for a C developer and HR comes back to them with 10 great web developers to be grilled by the engineers of team A - what happens then? Does team A shrug and say "welcome to our C codebase, we shall now rewrite it in tailwind or whatever because you are now here!" - I really don't see how it can play out

applfanboysbgon 3 hours ago||
This supposes team A has 10 C programmers in the first place. By one means or another, teams of web developers are put together and made to do non-web-development projects, and now half of the Windows 11 userland is written in fucking React. I'm not the one making these stupid decisions, but probably they were originally hired to work on a web project, then later moved to a new OS-related project because they were the pool of idle employees available, and the fleet of React-in-the-OS programmers expanded as new hires were now being funneled directly into React teams working on OS projects.
voakbasda 6 hours ago|||
Because they lack any better signals from within the company. At several places I have worked, hiring is almost fully detached from the groups that need the workers. They never could find good candidates for our teams. This kind of disconnect is what corporate cancer looks like, and it is endemic in big business.
mmastrac 4 hours ago||
If you're installing Samsung Magician for firmware updates, keep in mind that you can always update your firmware without using it and it's just as safe.
sunnybeetroot 1 hour ago||
Is my understand correct that if I install an app with homebrew cask and then uninstall it everything should be gone, or not even with the homebrew cask would everything be uninstalled?
r_lee 6 hours ago||
it all makes sense if you know how Korean software is like.

buttons being jpegs is the norm

Leomuck 3 hours ago|
Man, that is actually hilarious. Also reminds you that "Big Tech" doesn't necessarily build great stuff. They sell well, but are they built well? I don't even want to know how Microslops stuff looks behind the scenes :)
More comments...