I wonder what are the security implications.
I just opened a random URL and an arbitrary application was launched inside my Internet OS desktop.
What if someone gives me a link to a malicious password stealer, for example?
I think a permission system would be nice.
I guess that refers to the cloud storage/backend. Clientside apps seem to run as IFrames, so should be subjected to normal browser sandboxing (…and actually, I guess, multiprocessing too), with only explicit message-passing.
Honestly I think the developer API could have been better highlighted by this HN post. Puter's actually doing a bit more than the Desktop Environment mockup that's visually apparent, and not featuring that seems like a wasted opportunity to pick up some app developers.