Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Catalina is checking notarization of unsigned executables

lapcatsoftware.com

Post reply on HN
Print view View original

41–50 of 182 posts

Re: Catalina is checking notarization of unsigned executables

#41

Post by rayiner »

mokus wrote: post #24

I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.

My 16” is a huge disappointment. After swearing off Intel PCs after a disaster ours X1 Carbon, I switched back to a 2013 15” until this month. Figured after six months bugs would be ironed out. Wrong. I’m seeing two major glitches that have macrumors threads dozens of pages long: 1) with an external display connected, dGPU utilization shoots up to 20W at idle. (The rest of machine draws well under 10W at idle.) That wouldn’t be a big deal if the CPU and GPU didn’t share a tight 70W power budget. 2) when connected to an external monitor or dock—I’ve tried two different TB3 docks—the machine kernel panics regularly, usually waking up from sleep.

I’m torn. I don’t want to return the machine because everything else is crap. At least the 16” works well as a laptop so long as you don’t plug anything into the ports. But Apple’s Q&A has seriously gone down the toilet ever since Steve Jobs died. Clearly him throwing staplers at people was the glue holding Apple together.

Re: Catalina is checking notarization of unsigned executables

#42

Post by reaperducer »

rayiner wrote: post #41
mokus wrote: post #24

I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.

My 16” is a huge disappointment. After swearing off Intel PCs after a disaster ours X1 Carbon, I switched back to a 2013 15” until this month. Figured after six months bugs would be ironed out. Wrong. I’m seeing two major glitches that have macrumors threads dozens of pages long: 1) with an external display connected, dGPU utilization shoots up to 20W at idle. (The rest of machine draws well under 10W at idle.) That…

when connected to an external monitor or dock—I’ve tried two different TB3 docks—the machine kernel panics regularly, usually waking up from sleep.

I had a similar problem, and it turned out that the dock needed a driver. I don't think I've installed a driver for an external device since I switched to Macs years ago, so it never occurred to me that something like a dock would need a driver.

But it turns out that once I installed the vendor's driver, the problems all went away. I'm not sure who's fault that is.

Re: Catalina is checking notarization of unsigned executables

#43

Post by jmvoodoo »

mokus wrote: post #24

I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.

I've heard bad things about system76 laptop build quality (desktop I think is top notch). Has this improved at all?

Re: Catalina is checking notarization of unsigned executables

#44

Post by the_imp »

usmannk wrote: post #30

There is so much confusion here. The OP and most others are missing one of the biggest points: Look at the packet trace. There is _no data_, not even a hash, being sent. It's a TLS negotiation and then the connection ends. I have to suspect it's a bug...

The Objective-C format strings in the URL would imply that the hash is sent as a path parameter.

Re: Catalina is checking notarization of unsigned executables

#45

Post by huslage »

This is a specious problem _at best_. We have a very secure operating system doing things that others don't even try to do (notary) and we are complaining because our shell scripts take n seconds to run? Really people? If you are running signed and notarized (stapled) binaries, the system never even reports them to Apple in the first place.

This is the height of insanity to think that Apple or anyone else would want this data or use it for some nefarious purposes...anonymous hashes of junk data are essentially useless outside of this purpose. It's fine to claim not to trust anyone for anything, but most of us aren't willing or able to build our own hardware, write our own operating system, and write our own applications. We have asked our vendors for devices and code that are more trustworthy, and when they give them to us we COMPLAIN about it incessantly. This makes no sense to me.

Re: Catalina is checking notarization of unsigned executables

#46

Post by usmannk »

the_imp wrote: post #44
usmannk wrote: post #30

There is so much confusion here. The OP and most others are missing one of the biggest points: Look at the packet trace. There is _no data_, not even a hash, being sent. It's a TLS negotiation and then the connection ends. I have to suspect it's a bug...

The Objective-C format strings in the URL would imply that the hash is sent as a path parameter.

That's a string found in the disassembly of syspolicyd (I've found it as well). However, the actual URL you see in the TCP logs has no path whatsoever.

Re: Catalina is checking notarization of unsigned executables

#47

Post by Marsymars »

rayiner wrote: post #41
mokus wrote: post #24

I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.

My 16” is a huge disappointment. After swearing off Intel PCs after a disaster ours X1 Carbon, I switched back to a 2013 15” until this month. Figured after six months bugs would be ironed out. Wrong. I’m seeing two major glitches that have macrumors threads dozens of pages long: 1) with an external display connected, dGPU utilization shoots up to 20W at idle. (The rest of machine draws well under 10W at idle.) That…

I've had neverending problems with sleep mode on the Macs I've owned (2012 Mac Mini, now 2016 MacBook usually docked) - never really worked out the issue other than entirely disabling sleep when connected to power.

Re: Catalina is checking notarization of unsigned executables

#48

Post by Marsymars »

72deluxe wrote: post #39
rimliu wrote: post #29

Earlier quoted context omitted.

I upgraded my 2015 MBP 13" to Catalina and happily continue to Mac stint since 2006.

What does df -h in the terminal say? It'll show the total of each partition (the normal, and the new read-only system partition) on their own line, thereby giving a false total. e.g. 1x 100GB disk, 50GB normal, 50GB system partition will show as capacity 100GB for both partitions which would mean a 200GB disk. Small things like this just make me completely lose faith in Catalina. EDIT: Other "fun" things I noticed wi…

> a. Text search in PDF no longer works

Oh is this macOS? I'd just assumed all the PDFs I've tried to search for the past while have been poorly formatted with the text as images, but that makes more sense.

> I'll keep it on a SSD for App Store submissions and keep my machine on an older decent version thanks

FYI it's pretty easy to integrate binary upload to App Store Connect on the CLI of your CI system.

Re: Catalina is checking notarization of unsigned executables

#49

Post by thestephen »

rayiner wrote: post #41
mokus wrote: post #24

I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.

My 16” is a huge disappointment. After swearing off Intel PCs after a disaster ours X1 Carbon, I switched back to a 2013 15” until this month. Figured after six months bugs would be ironed out. Wrong. I’m seeing two major glitches that have macrumors threads dozens of pages long: 1) with an external display connected, dGPU utilization shoots up to 20W at idle. (The rest of machine draws well under 10W at idle.) That…

Since 10.15.4, my 16" started having kernel panics while waking up from sleep. Disabling Power Nap seems to mitigate this.

While this is an awful stopgap solution, at least I can get back to work.

Re: Catalina is checking notarization of unsigned executables

#50

Post by digitaltrees »

mokus wrote: post #24

I guess the list of things keeping me off catalina (and, by extension, new Mac hardware) just got one item longer. I recently bought a new System76 laptop as a stopgap, but it might end up becoming permanent. Kind of a sad end for 25+ years of Mac use.

What are the other problems with Catalina for you? I ask because every time there is an OS X update someone posts this exact sentiment but then over a few months the issues get resolved. Please don’t interpret this as an attack; I am genuinely curious and want to see if Apple ends up fixing things.

I my self have a maxed out 16 MacBook Pro and a for the first few weeks after the upgrade it was literally in usable because routine user input would result in the entire system locking up. I suspect it was actually this issue but, thankfully, the issue is now resolved.

Post reply on HN