Earlier quoted context omitted.
Wow that is really damning, trashing user security in trade to remove a single click that makes it clear as to what is happening. This totally breaks Apple's Developer Terms right?
There are no “developer terms” that developers have to abide by for the Mac.
BlueJeans also runs a webserver when installed on macOS
31–40 of 98 posts
Re: BlueJeans also runs a webserver when installed on macOS
#32Earlier quoted context omitted.
Wow that is really damning, trashing user security in trade to remove a single click that makes it clear as to what is happening. This totally breaks Apple's Developer Terms right?
> Wow that is really damning, trashing user security in trade to remove a single click As someone who has had to develop and maintain a similar web-to-desktop bridge I can tell you that this one issue was responsible for around 90% of my company’s total support requests, despite only being a small feature in a optional addon in one of our main products. For businesses just trying to keep their customers happy, this p…
That is interesting. What were the support requests, how to remove the confirm step, or what to do if you denied it but didn’t mean to? Or something else?
Re: BlueJeans also runs a webserver when installed on macOS
#33Earlier quoted context omitted.
They were probably also against Window's UAC popups.
Everyone I knew was against UAC popups, including security professionals. They were likened to California Prop 65 warnings: so prolific as to be ignored, and arguably causing more harm than good, because just as apparently since EVERYTHING causes cancer one can't make decisions about avoiding things that actually do, so to does EVERYTHING trigger a UAC popup and so who gives a fuck, one more thing to quickly ignore a…
UAC is the correct idea (elevated user privilege levels), but implemented in the worst way possible. As I understand it, things have gotten MUCH less annoying since Vista, but it still left a bad taste in people's mouths.
Re: BlueJeans also runs a webserver when installed on macOS
#34Earlier quoted context omitted.
You’ve used past tense in all your examples. Is it still true? As Apple has moved more towards a system with GateKeeper where apps must operate in a sandbox, this behavior seems less acceptable in 2019. I don’t want apps having complete access to my home directory because they absolutely do not need it to function. I like that when I remove an app installed via App Store on Mac, I know it’s actually gone. It seems li…
Use the App Store and the preference setting to only allow App Store apps if you want that behavior. Macs are general purpose computers and it would be absolutely inappropriate for Apple to try to prevent users from running software on them.
Look, all that makes sense if users are giving informed consent to have an app install a web server. Users should be able to run whatever they want, but they should also know what an app is installing.
At least the Bluejeans people have this page. The Zoom people did the same thing (possibly worse), but it was undocumented.
Re: BlueJeans also runs a webserver when installed on macOS
#35Earlier quoted context omitted.
Wow that is really damning, trashing user security in trade to remove a single click that makes it clear as to what is happening. This totally breaks Apple's Developer Terms right?
How is it trashing user security?
I don't think I understand the security implications of this either. Seems distasteful, but how could it be exploited?
Re: BlueJeans also runs a webserver when installed on macOS
#36Has anyone found a similar vulnerability with the BlueJeans local server? I tried sending a few test URLs and they don't seem to do anything so I'm not sure what the protocol is. If BlueJeans can't cause a webpage to launch it's app like Zoom does then I'm less concerned.
Re: BlueJeans also runs a webserver when installed on macOS
#37Why is this site completely unusable with cookies disabled? All I see is this: Technical Stuff To view this site, enable cookies in your browser.
Least you get something. I get a blank page when JS is disabled...
Re: BlueJeans also runs a webserver when installed on macOS
#38Earlier quoted context omitted.
There are no “developer terms” that developers have to abide by for the Mac.
I'm fairly certain you have to agree to some to join the Apple Developer Program, which is (sort-of) required if you want people to be able to run your app.
You don’t have to be in the developer program ftp distribute your app on the Mac.
Re: BlueJeans also runs a webserver when installed on macOS
#39Earlier quoted context omitted.
There are no “developer terms” that developers have to abide by for the Mac.
Ahem. https://developer.apple.com/terms/apple-developer-agreement/...
And you are not forced to abide by the developer terms to release a program for the Mac just as I said. Despite all of the HN conspiracies, you can develop for and release code on the Mac without Apple’s permission. You don’t have to abide by those terms.
Re: BlueJeans also runs a webserver when installed on macOS
#40Why is this news? A lot of desktop applications do this. The Spotify client used to do it to enable play/pause controls from any webpage. Dropbox also definitely used the same method for single sign on, maybe still does, I don't use it anymore.