Live data from Hacker News

macOS 10.15 Vista

tyler.io

111–120 of 322 posts

Re: macOS 10.15 Vista

#111
post #27

You know, this is a pretty apt analogy. Vista (apparently) was considered terrible primarily because it ripped off the band-aid and made a bunch of inconvenient but important-for-security-in-the-long-term changes. [0] [0]: https://twitter.com/swiftonsecurity/status/85185740489147187...

I think I was the only person I know who actually liked Vista, mainly because of these. I was on the fence about installing Catalina but this blog post paradoxically convinced me to do so.

Re: macOS 10.15 Vista

#112

I for one am super happy for these permission dialogs. They help me know which apps are doing what and tell them, no, you can't do that! Going from the old model, a native app can do almost anything to the new model, a native app has to ask permission means that yes, there is a one time issue of having to give all apps the permissions you want them to have. That happens just once though on this transition. Normally i…

I'm all for them as well. Forced me to reconsider some of the apps I have installed having not previously known what they were doing. Example, bartender needs screen recording. While Im sure it's 100% safe, I still don't trust giving an app that permission if its going to be running all the time. Just seems like an unnecessary attack vector.

Seeing some people say 'if you were fine with it before...' - well that's the thing, I wouldn't have been fine with it before if I had known.

Re: macOS 10.15 Vista

#113

Earlier quoted context omitted.

FWIW, every program looks like one that usually is set to start at startup; the intent is to have the dialogue only show up when you start an app for the first time. Since so many background apps were running at startup they all slowly needed to ask for their permissions. > create a migration UX Might not be possible if the previous MacOS isn't full-on tracking what folders a program is accessing, and it still would…

If you were ok running your previous apps you should also be ok with gathering usage data for a week before the OS attempts to do a hard cut-over to a more secure model.

It seems like this would be very difficult to implement securely. You basically would have to preserve the old, unsafe mode and hope that nobody circumvents whatever restrictions you put in place to make sure that it only applies to the pre-migration apps .

Re: macOS 10.15 Vista

#114
It seems to me that for the sake of user experience they should really, really try to automatically coalesce multiple system messages and notifications that appear while others have not yet been dismissed. For example, automatically grow the first alert into a list with checkboxes or something if another alert shows up, so that the user can reply to all of them in a sane way.

Re: macOS 10.15 Vista

#115
post #87

I'm astounded with some of the user security dialogs that Macs display. I got one today: "VSCode wants to make some changes. Deny or Allow." That was the exact wording. Seriously? THIS. BENEFITS. NO. ONE. The only thing I can figure is that, somehow, Mac has required applications to display something to the user to get their permission to make some substantial system-level changes. But the application is, I guess?, a…

So you want all your apps to have root-level system access?

Re: macOS 10.15 Vista

#116
post #106

Earlier quoted context omitted.

These are all new permissions. So there is no database of applications that need access to read/write Documents or Pictures. So a UI like you are suggesting is not technically possible to create.

Maybe we have different understandings of how that UI would work, but I imagine it to be totally possible: Take all the windows/notifications from OP's screenshot, map each of them to a row in a table, group by application. Show all this info in 1 modal, call it Migration Assistant.

The notification is thrown at the point of need. Some will appear when the application is first started, but some will only appear if the app is directed to a specific state by the user.

Re: macOS 10.15 Vista

#117
post #87

I'm astounded with some of the user security dialogs that Macs display. I got one today: "VSCode wants to make some changes. Deny or Allow." That was the exact wording. Seriously? THIS. BENEFITS. NO. ONE. The only thing I can figure is that, somehow, Mac has required applications to display something to the user to get their permission to make some substantial system-level changes. But the application is, I guess?, a…

So you want all your apps to have root-level system access?

I think the poster above is arguing that dialogs like "this app needs permissions, deny or allow" are effectively giving root-level system access for all intents and purposes, for almost all users -- exactly because users have no basis on which to make that decision and saying "deny" probably prevents the app from doing what it was the user wanted it to do.

So users almost always click "allow". What's the point of the dialog then?

Really, the dialog should be explicit about what's needed and why it's needed and what click "allow" does (i.e., always allow this action, for this purpose? Or always allow any root-level action from this app? Or something else?)

Only then will users actually be able to make a decision beyond "do I trust Microsoft and do I want to do this thing I just asked Word to do?"

Re: macOS 10.15 Vista

#118
post #87

I'm astounded with some of the user security dialogs that Macs display. I got one today: "VSCode wants to make some changes. Deny or Allow." That was the exact wording. Seriously? THIS. BENEFITS. NO. ONE. The only thing I can figure is that, somehow, Mac has required applications to display something to the user to get their permission to make some substantial system-level changes. But the application is, I guess?, a…

My favorite are the dialogs whose only options are "Do the thing we want" or "Learn more about the thing we want" with no option to dismiss. Slightly less terrible are the daily dialogs that give the options "Do the thing we want" or "Bug me tomorrow". More and more, Apple devs seem to have contempt for the idea that the user should be in control.

They haven't quite descended to Microsoft levels of "We're restarting your computer now kthxbye", but it's a grim, user hostile path they're on, at least with notifications.

Re: macOS 10.15 Vista

#119

Earlier quoted context omitted.

If you were ok running your previous apps you should also be ok with gathering usage data for a week before the OS attempts to do a hard cut-over to a more secure model.

It seems like this would be very difficult to implement securely. You basically would have to preserve the old, unsafe mode and hope that nobody circumvents whatever restrictions you put in place to make sure that it only applies to the pre-migration apps .

If all of 10.14 were tracking it there probably wouldn't be much issue, but i'll bet the average MacOS user doesn't have more than 5 startups apps that would show this dialogue; that combined with this happening exactly once during the upgrade process means it's not a big priority for Apple to address.

Re: macOS 10.15 Vista

#120
post #16

Earlier quoted context omitted.

Apple could have figured out a way to coalesce all the individual pop-ups into a single window. I'm sure they considered it and deemed it not worth the effort since this is a one-time pain... of course it's one-time pain shared by millions of users. :-(

An individual window would have completely destroyed the point. The point was to make you aware of what permissions the applications you use require access to. And to get explicit permission from the user.

An individual window would have completely destroyed the point.

Hardly. Apple could have used the OSX installer to scan two or three common locations for applications and do a bit of static analysis. Apple could have put the permissions notifications in the notification center with an annoying nag screen every hour or two for the first ~30 days turning into an immediate prompt after that (or after all detected programs have been processed).

Post reply on HN