Live data from Hacker News

Sorry macOS users, but Apple has gone too far for some of us devs

gridsagegames.com

41–50 of 118 posts

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#41

Earlier quoted context omitted.

> you are effective requiring your users to give you root access Wait, it's either code sign and you don't get root or don't code sign and get root? How retarded is macOS? Why is there no "no code sign and no root, just run as the user"?

I'm pretty sure on Linux if you wanted to run Quake3 you had to run as root due to needing direct access to the GPU. Is Linux "retarded" too?

Please don’t use that term in the way you’re using it. It’s offensive and unnecessary.

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#42
post #5

I’m glad Apple is locking down binaries. It’s terrifying what malicious binaries are capable of. For games in particular there should be better sand boxing options.

Signed binaries don't stop malicious binaries. It can help prevent the spread of malicious binaries once they've been identified as malicious, but it does nothing to stop the initial mayhem.

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#43

Earlier quoted context omitted.

> you are effective requiring your users to give you root access Wait, it's either code sign and you don't get root or don't code sign and get root? How retarded is macOS? Why is there no "no code sign and no root, just run as the user"?

I'm pretty sure on Linux if you wanted to run Quake3 you had to run as root due to needing direct access to the GPU. Is Linux "retarded" too?

Plenty of coding practices from 1999 are completely unacceptable today.

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#44
post #41

Earlier quoted context omitted.

I'm pretty sure on Linux if you wanted to run Quake3 you had to run as root due to needing direct access to the GPU. Is Linux "retarded" too?

Please don’t use that term in the way you’re using it. It’s offensive and unnecessary.

I'm quoting the guy above me. Go tell him.

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#45
post #37

Earlier quoted context omitted.

> you are effective requiring your users to give you root access Wait, it's either code sign and you don't get root or don't code sign and get root? How retarded is macOS? Why is there no "no code sign and no root, just run as the user"?

Or: you don’t codesign and users ignore your app in favor of the one that doesn’t require rebooting to recovery mode to disable core platform security features, so that chrome, etc can break your machine. Longer term I imagine that OS X will simply have an non-overridable sandbox that tightly restricts what any unnotarized app can do. Eg if you aren’t notarized you get access to your own container and no other part o…

Analogy falls apart for Chrome since it's safe to assume Apple either gives scaning priority to Google or has outright whitelisted their account (since Chrome updates so frequently and there's opportunity for Google to throw money at Apple)

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#46

Earlier quoted context omitted.

I'm pretty sure on Linux if you wanted to run Quake3 you had to run as root due to needing direct access to the GPU. Is Linux "retarded" too?

Plenty of coding practices from 1999 are completely unacceptable today.

Yes. That is why Apple requires you to get your code signed.

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#47
post #32
post #23

Yikes. If you can't figure out how to make your code 64-bit safe, or how to make code signing work, you are effective requiring your users to give you root access. Completely unacceptable for a game.

1. You also need to pay apple a subscription, update your hardware, change your build process. I think there is also a review step during the build. 2. All the existing tooling (not the game, but the build process) will need to be 64 bit to run on this new hardware. So the build needs to be re-worked 3. People on Mac require more support, which is harder because dev is not a Mac user.

[deleted]

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#48

the first commercial downloadable game I released back in 2015, that let me become a full-time indie developer, has done roughly 25% of its revenue over the last four years on Mac. This is adding together the % of copies sold on Steam for Mac users, and the Apple Mac Store, where my game was featured on the main page for three months. Notarization, and 64-bit support, and all that aside, the audience on Mac that you…

I feel like there's also something of a snowball effect here because in certain genres the available set of games are good enough to rarely need to reboot into Windows. All the Paradox strategy games, X-COM, a variety of indie games built on Unity, etc. It feels like the only thing I'm ever consistently missing out on is FPS games, and even then there's been workable ports of stuff like Deus Ex.

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#49

Earlier quoted context omitted.

All malware checkers must read the app binary to be effective. Apple forces the app to be scanned once, not one million times on one million desktops.

Apple also forces every single app for macOS to be submitted to them. Seeing as how Apple has historically been willing to compete with the applications on their platform, that seems to at least have the potential to be a problem.

If they want to use your compiled binary to compete with you somehow, buying one copy per app they want to put out of business seems like a better option instead of setting up a whole notirization scheme to trick you into uploading it to them.

Re: Sorry macOS users, but Apple has gone too far for some of us devs

#50
post #5

I’m glad Apple is locking down binaries. It’s terrifying what malicious binaries are capable of. For games in particular there should be better sand boxing options.

The fact that they are capable of that is an OS flaw. Signing and all the rest is repairing a leaky dam with chewing gum.

Our OSes all date back to a time when security simply was not such a concern. All binaries almost have root. A modern OS would be least-privilege all the way.

Btw web browsers show that it is possible to run untrusted code locally in a sandbox and do so fairly safely.

Post reply on HN