What's the exact data being sent?
There is a lot of arguing going on here, but what is the data?
Catalina is checking notarization of unsigned executables
31–40 of 182 posts
Re: Catalina is checking notarization of unsigned executables
#32There is so much confusion here. The OP and most others are missing one of the biggest points: Look at the packet trace. There is _no data_, not even a hash, being sent. It's a TLS negotiation and then the connection ends. I have to suspect it's a bug...
In prior article "slow by design", this was reported to Apple and the bug was closed that it works like that by design.
Re: Catalina is checking notarization of unsigned executables
#33There is so much confusion here. The OP and most others are missing one of the biggest points: Look at the packet trace. There is _no data_, not even a hash, being sent. It's a TLS negotiation and then the connection ends. I have to suspect it's a bug...
In prior article "slow by design", this was reported to Apple and the bug was closed that it works like that by design.
I did see the previous article (another comment of mine should be easy to find on its HN post). Do you know how to find the issue that was referenced? There was an ID given but I have no clue what tracker that was on.
Re: Catalina is checking notarization of unsigned executables
#34I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.
With issues like this and the 4000 series Ryzen mobile processors, top specced MacBook Pros are very noticably slower than $1k alternatives.
Re: Catalina is checking notarization of unsigned executables
#35Earlier quoted context omitted.
In prior article "slow by design", this was reported to Apple and the bug was closed that it works like that by design.
I did see the previous article (another comment of mine should be easy to find on its HN post). Do you know how to find the issue that was referenced? There was an ID given but I have no clue what tracker that was on.
It's probably Radar, which is Apple's internal issue tracker, which isn't public (you can see issues you submitted, but nothing else). Sometimes people cross-post issues they submit to http://openradar.appspot.com, so you might be able to find it there.
Re: Catalina is checking notarization of unsigned executables
#36Earlier quoted context omitted.
In prior article "slow by design", this was reported to Apple and the bug was closed that it works like that by design.
I did see the previous article (another comment of mine should be easy to find on its HN post). Do you know how to find the issue that was referenced? There was an ID given but I have no clue what tracker that was on.
That ID was likely for feedbackassistant.apple.com. However, those reports are not public, so you can't see them unless you're the one that reported them though. Knowing the ID is still useful for things like emailing Apple people and complaining about their declining software quality ;).
Re: Catalina is checking notarization of unsigned executables
#37There is so much confusion here. The OP and most others are missing one of the biggest points: Look at the packet trace. There is _no data_, not even a hash, being sent. It's a TLS negotiation and then the connection ends. I have to suspect it's a bug...
Is the handshake all that is needed to verify? Is the data you're expecting sent during the authentication phase of the handshake?
Re: Catalina is checking notarization of unsigned executables
#38It's great tool for mass-surveillance. Since Apple has a database of all the apps the user has run on their device (but no worries, Google has the same). For your security ;)
> great tool for mass-surveillance It’s not really that great for mass-surveillance. It “phone’s home” only on first run. And it doesn’t look like it sends data about your identity, device or location. They can have your IP address but another mechanism would be needed to relate that to you. (I doubt they are logging the IP address anyway. The only purpose would be to surveil you, but if they wanted to do that they w…
>It “phone’s home” only on first run.
Do we know that? The cache may well have an expiration date. Does the cache stay after an OS upgrade? I suspect further research will discover it's not just 'first time'.
>They can have your IP address but another mechanism would be needed to relate that to you.... if they wanted to do that they would surely use a more capable mechanism.
The app profile would already tell a great deal. Once enough of these 'non-capable' surveillance mechanisms add up, you end up with a very capable surveillance mechanism.
Re: Catalina is checking notarization of unsigned executables
#39I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.
I upgraded my 2015 MBP 13" to Catalina and happily continue to Mac stint since 2006.
What does df -h in the terminal say?
It'll show the total of each partition (the normal, and the new read-only system partition) on their own line, thereby giving a false total. e.g. 1x 100GB disk, 50GB normal, 50GB system partition will show as capacity 100GB for both partitions which would mean a 200GB disk.
Small things like this just make me completely lose faith in Catalina.
EDIT: Other "fun" things I noticed within half an hour:
a. Text search in PDF no longer works
b. I can't create anything under /
c. I have to use synthetic.conf to map paths from / to my real partition, but the parser of synthetic.conf is very particular to tabs/spaces unlike any other /etc/ file format
d. Xcode wants to ask for my password to debug every single time I reboot and debug a C++ app. This is incredibly incredibly incredibly incredibly annoying.
Safari is faster in general use. But that's so far the only good point.
I'll keep it on a SSD for App Store submissions and keep my machine on an older decent version thanks
Re: Catalina is checking notarization of unsigned executables
#40Earlier quoted context omitted.
But the fingerprint of photoshop is the same for everyone. If apple knows what the fingerprint of photoshop is (which they could easily find out), now they have a giant list of who installed photoshop and when, and from which IP address, and which IP location. That data would be a wet dream for some IP lawyer looking for pirate copies of software...
The Photoshop binary is signed (presumably; it's been years since I last ran it), so this check would NOT be conducted. Edit: What I should have said is that the binary is signed, notarized, and the notarization stapled to it, as described here: https://developer.apple.com/documentation/xcode/notarizing_m...
The author of the article mentioned explicitly that he signed a binary, and the check still occurred.