Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Validating Your Version of Xcode

developer.apple.com

Post reply on HN
Print view View original

91–100 of 101 posts

Re: Validating Your Version of Xcode

#91

Post by CountSessine »

Osmium wrote: post #67
cjensen wrote: post #8

Am I understanding this correctly: the devs who downloaded Xcode from an unknown source disabled gatekeeper to get it to run? That's unbelievably stupid dev behavior, if true.

> Am I understanding this correctly: the devs who downloaded Xcode from an unknown source disabled gatekeeper to get it to run? This is generally known as hubris. We think we're smart and that the rules don't apply to us, because we know better than the other people. Turns out they can protect us too. Who knew? In this instance, I'd give the Chinese developers the benefit of the doubt, having recently had first hand…

in which case it's on Apple to improve their CDN within China

I'm not quite sure why it's up to anyone outside of China, Apple included, to bear the cost of China's firewall dickery.

This is on China to turn off their firewall or bear the costs, commercial and otherwise, of this stupidity. Perhaps Chinese developers shouldn't be allowed to submit apps to the non-Chinese app store?

Re: Validating Your Version of Xcode

#92

Post by jlarocco »

jonknee wrote: post #82
jlarocco wrote: post #13

Earlier quoted context omitted.

I don't think having Gatekeeper disabled is a very big deal. It's one of the first things I disable on a new Mac. I've never had it stop an actual piece of malware, and it triggers false positives on practically everything. That said, I have no idea why anybody would download XCode from a third party...

> I've never had it stop an actual piece of malware, and it triggers false positives on practically everything. Well it would have stopped this actual piece of malware! How often are you installing unsigned applications that a single right click to add to a whitelist is too much effort?

> Well it would have stopped this actual piece of malware!

And I'm not infected by this piece of malware, so I still trust myself over Gatekeeper.

> How often are you installing unsigned applications that a single right click to add to a whitelist is too much effort?

Far more often than I install things from the app store. I don't find it to be a useful feature, so I disable it.

Re: Validating Your Version of Xcode

#93

Post by jlarocco »

epmatsw wrote: post #52
jlarocco wrote: post #13

Earlier quoted context omitted.

I don't think having Gatekeeper disabled is a very big deal. It's one of the first things I disable on a new Mac. I've never had it stop an actual piece of malware, and it triggers false positives on practically everything. That said, I have no idea why anybody would download XCode from a third party...

If you've had it disabled for a while, you should give it another go. Just about every app is signed now. I think the only one on my machine that isn't at this point is PopcornTime (for obvious reasons).

Actually, many Apple upgrades have a side effect of turning it back on, so I end up giving it another shot whether I want to or not every few months. Both my MBP and iMac had it turned on after the last Apple updates a few days ago, and I found out when I wasn't allowed to run something.

If it were just unsigned apps I wouldn't mind so much, but it's the stupid, "This application came from the internet..." dialog box that drives me nuts most of the time.

Re: Validating Your Version of Xcode

#94

Post by liquidise »

gress wrote: post #80
liquidise wrote: post #49

Earlier quoted context omitted.

I'm fascinated that there are people on HN who have not disabled GateKeeper. I'm not sure i've used a machine since it was added where i haven't disabled it within an hour of setting up a machine.

Why would you do that? It it exposes you to risk, and as has now been proven, if adopted as a general practice it exposes everyone else to risk too.

I do it because i do not use the App Store to download apps. Every open source app i download that is not signed with Apple needs GateKeeper disabled.

Re: Validating Your Version of Xcode

#95

Post by msbarnett »

cheshire137 wrote: post #65
epmatsw wrote: post #50

Earlier quoted context omitted.

How often do you install new software that's unsigned? I've only done it a couple of times, and once you override Gatekeeper for a specific app it never asks you for that one again.

I rarely find apps on the Mac app store, they're usually always from the app's creator's website. Recent ones I can think of include Bowtie and Sublime Text 3.

Most apps are signed nowadays, regardless of whether or not you're getting them from the store.

Re: Validating Your Version of Xcode

#96

Post by msbarnett »

liquidise wrote: post #94
gress wrote: post #80

Earlier quoted context omitted.

Why would you do that? It it exposes you to risk, and as has now been proven, if adopted as a general practice it exposes everyone else to risk too.

I do it because i do not use the App Store to download apps. Every open source app i download that is not signed with Apple needs GateKeeper disabled.

> Every open source app i download that is not signed with Apple needs GateKeeper disabled.

No.

Every unsigned app you download needs to be whitelisted. Right click the app, click open. It will remember your choice and whitelist the app forever more.

Solving the unsigned app problem by silently ignoring clearly invalid signatures is like solving an ant problem by burning down your house.

Re: Validating Your Version of Xcode

#97

Post by patmcc »

davidkhess wrote: post #79
patmcc wrote: post #48

I'm getting "a sealed resource is missing or invalid", with a copy of Xcode I know was installed from the App Store. Any ideas?

If you use `codesign -v --verbose /Applications/Xcode.app` you may see: file added: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/share/man/whatis file added: /Applications/Xcode.app/Contents/Developer/usr/share/man/whatis That should be safe. It's a bit of a shock that Apple: 1) is modifying sealed containers post-install (it's the weekly periodic job that rebuilds whatis databas…

Thanks! Yep that was it, I owe you one.

Re: Validating Your Version of Xcode

#98

Post by cibyr »

Flimm wrote: post #70
cjensen wrote: post #32

Earlier quoted context omitted.

If you run an app that gatekeeper forbids, when you go into settings to fix that there is a button to approve that single app. There's no need to let everything through.

Same with Android.

Is that new in M? I haven't seen that on Lollipop (5.1)

Re: Validating Your Version of Xcode

#99

Post by ksec »

Yes, there are connection problem downloading Xcode from Apple'site. Since there is GFW.

But my biggest question of why, Apple manage to get CDN for their Live Streaming Event, App Store, and Mac Apps but not for their developer references and tools.

A honest mistake? Or Sloppiness from their Cloud "Services" again?

Re: Validating Your Version of Xcode

#100

Post by jonknee »

jlarocco wrote: post #92
jonknee wrote: post #82

Earlier quoted context omitted.

> I've never had it stop an actual piece of malware, and it triggers false positives on practically everything. Well it would have stopped this actual piece of malware! How often are you installing unsigned applications that a single right click to add to a whitelist is too much effort?

> Well it would have stopped this actual piece of malware! And I'm not infected by this piece of malware, so I still trust myself over Gatekeeper. > How often are you installing unsigned applications that a single right click to add to a whitelist is too much effort? Far more often than I install things from the app store. I don't find it to be a useful feature, so I disable it.

> And I'm not infected by this piece of malware, so I still trust myself over Gatekeeper.

That's idiotic.

Post reply on HN