Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Catalina is checking notarization of unsigned executables

lapcatsoftware.com

Post reply on HN
Print view View original

151–160 of 182 posts

Re: Catalina is checking notarization of unsigned executables

#151

Post by userbinator »

cryptonector wrote: post #126
usmannk wrote: post #30

There is so much confusion here. The OP and most others are missing one of the biggest points: Look at the packet trace. There is _no data_, not even a hash, being sent. It's a TLS negotiation and then the connection ends. I have to suspect it's a bug...

"no data", just a TLS handshake. Of course information can flow! You could put a hash of the executable in a ClientHello extension, and if the server says "i don't know it to be malware" it can finalize the TLS connection normally.

I have a feeling that there is already a system out there which does something like that.

Re: Catalina is checking notarization of unsigned executables

#152

Post by brigandish »

mindfulhack wrote: post #131
TheRealPomax wrote: post #123

Little Snitch is a god-send for users of MacOS, be they voluntary users or forced into using it because their employer won't allow them to use anything else.

I've found Objective-See's LuLu to be even better in catching every application and obscure binary daemon that ever makes a connection to the network and allowing me to set a temp or permanent block/allow rule for it - and it's FOSS. Try it out: https://objective-see.com/products/lulu.html

I didn't know about LuLu, thanks. I'm trying it out now and it's not been too bothersome (so far), which is always nice. I used Little Snitch for a few years but not only was it always in my face with the pop-up dialog (poor UI choice) but because it uses plist files for its database it became incredibly slow. Had to give up on it.

I tried Murus/Vallum[1] too for a while but it was still a bit too complicated and demanding. There's still a space for a firewall with a decent UI available.

Won't be a Mac for me after this machine though.

[1] https://www.vallumfirewall.com/

Re: Catalina is checking notarization of unsigned executables

#153

Post by rayiner »

deergomoo wrote: post #148
rayiner wrote: post #41

Earlier quoted context omitted.

My 16” is a huge disappointment. After swearing off Intel PCs after a disaster ours X1 Carbon, I switched back to a 2013 15” until this month. Figured after six months bugs would be ironed out. Wrong. I’m seeing two major glitches that have macrumors threads dozens of pages long: 1) with an external display connected, dGPU utilization shoots up to 20W at idle. (The rest of machine draws well under 10W at idle.) That…

I have both of the issues you describe. Unfortunately, while the kernel panics will most likely be fixed eventually (10.15.4 is a complete shitshow, even by Catalina standards), it seems the dGPU is actually working as designed with the high idle power draw. If you search for “navi multiple monitor power draw” you can find reports of desktop AMD cards that predate the 16” MacBook Pro that exhibit the exact same behav…

> you search for “navi multiple monitor power draw” you can find reports of desktop AMD cards that predate the 16” MacBook Pro that exhibit the exact same behaviour. It’s something to do with memory clocks and mismatched resolutions/refresh rates between monitors, and I very much doubt it will ever be addressed via software (if it even can be).

At least when operating in clamshell mode with one external monitor, I can get the power usage to drop from 20W down to 5W by using switchresx and dropping the refresh rate from 59.88 to 56.88 Hz. When I do that, even light WebGL work doesn’t cause it to exceed 7-8 watts.

It sounds like some work around for the special case of a single external monitor with the internal display closed isn’t kicking in like it’s supposed to.

Re: Catalina is checking notarization of unsigned executables

#154

Post by ancarda »

nine_k wrote: post #150
ancarda wrote: post #103

Earlier quoted context omitted.

If only moving to Linux were an option for everyone. The other day I tried for the 100th time to move to Linux. I installed a recent build of a maintained, popular distribution (no it doesn't matter which one - I have tried them all), on hardware that is famous for it's Linux support. Everything worked for a day and a half, then the sound just fucking died. No input or output. I get millions of people use Linux daily…

I had sound drivers die on me on famous brands laptops under Windows. I had OSX lock up or lose any display on MBPs with NVidia chips. On my wife's old windows desktop I had to plug a USB audio dongle, because of audio glitches. Some of it is sloppy drivers, some, faulty or poorly designed hardware. "Sound just died" is, unfortunately, not specific to Linux in any way.

Sure, though I am describing my latest attempt in like 15 years of using Linux on and off. At some point "every OS has its problems" just stopped being true for me.

Linux really sucks for anything other than servers. I hate to say that because I badly wish it weren't true, but it is.

Re: Catalina is checking notarization of unsigned executables

#155

Post by ancarda »

f1refly wrote: post #137
ancarda wrote: post #103

Earlier quoted context omitted.

If only moving to Linux were an option for everyone. The other day I tried for the 100th time to move to Linux. I installed a recent build of a maintained, popular distribution (no it doesn't matter which one - I have tried them all), on hardware that is famous for it's Linux support. Everything worked for a day and a half, then the sound just fucking died. No input or output. I get millions of people use Linux daily…

Seems like linux is not for you, just stay on macos and enjoy your user hostile nonfree software :)

I mean, sound not working is pretty user hostile too. But yeah, I have come to the conclusion Linux isn't right for me. Sadly neither is Windows, and macOS is rapidly getting worse.

Do you remember when computers were fun?

Re: Catalina is checking notarization of unsigned executables

#156

Post by pjmlp »

ancarda wrote: post #154
nine_k wrote: post #150

Earlier quoted context omitted.

I had sound drivers die on me on famous brands laptops under Windows. I had OSX lock up or lose any display on MBPs with NVidia chips. On my wife's old windows desktop I had to plug a USB audio dongle, because of audio glitches. Some of it is sloppy drivers, some, faulty or poorly designed hardware. "Sound just died" is, unfortunately, not specific to Linux in any way.

Sure, though I am describing my latest attempt in like 15 years of using Linux on and off. At some point "every OS has its problems" just stopped being true for me. Linux really sucks for anything other than servers. I hate to say that because I badly wish it weren't true, but it is.

How could it be any different actually?

A Linux conference is usually focused on the Linux kernel, drivers, filesystems, networking, more or less everything POSIXy.

If you want to learn about improvements at the UI level, there are XDG, GUADEC, Kacademy, each focused on their own silo, and other parts of the stack or UI tooling don't have any at all.

Meanwhile WWDC, Google IO, BUILD / Ignite are about all levels of the stack.

Re: Catalina is checking notarization of unsigned executables

#157

Post by TheRealPomax »

mindfulhack wrote: post #131
TheRealPomax wrote: post #123

Little Snitch is a god-send for users of MacOS, be they voluntary users or forced into using it because their employer won't allow them to use anything else.

I've found Objective-See's LuLu to be even better in catching every application and obscure binary daemon that ever makes a connection to the network and allowing me to set a temp or permanent block/allow rule for it - and it's FOSS. Try it out: https://objective-see.com/products/lulu.html

I also hadn't heard of LuLu, great suggestion!

Re: Catalina is checking notarization of unsigned executables

#159

Post by robotbikes »

nine_k wrote: post #150
ancarda wrote: post #103

Earlier quoted context omitted.

If only moving to Linux were an option for everyone. The other day I tried for the 100th time to move to Linux. I installed a recent build of a maintained, popular distribution (no it doesn't matter which one - I have tried them all), on hardware that is famous for it's Linux support. Everything worked for a day and a half, then the sound just fucking died. No input or output. I get millions of people use Linux daily…

I had sound drivers die on me on famous brands laptops under Windows. I had OSX lock up or lose any display on MBPs with NVidia chips. On my wife's old windows desktop I had to plug a USB audio dongle, because of audio glitches. Some of it is sloppy drivers, some, faulty or poorly designed hardware. "Sound just died" is, unfortunately, not specific to Linux in any way.

I've had good luck with System76 & PopOS, they put in the extra effort to make sure Linux just works on the hardware they sell and will respond to any tech support issues. Recently switched back to running Debian desktop on a older system and have ran into some intermittent sound issues that are frustrating, so I can relate but haven't had that kind of issue with any of the System76 laptops I've used.

Re: Catalina is checking notarization of unsigned executables

#160

Post by knolan »

brigandish wrote: post #136
knolan wrote: post #90

Earlier quoted context omitted.

I’m curious, is there a reason to use image capture when you can just AirDrop the images? Does Image Capture give you the HEIC format file or something?

Surely it's faster?

It requires finding a (USB 2.0) cable, connecting both devices, approving trust, and then opening an App and selecting and waiting.

AirDrop requires touch based selection and sharing on the iOS device and the transfer is very quick and if it’s your Mac the files go straight to your downloads folder.

So it’s more streamlined overall with AirDrop.

I had a colleague who used to do a similar dance with Image Capture. He had no idea he could AirDrop photos even though he airdropped files from Finder to others all the time.

Personally I just have them all sync via iCloud Photo Library.

Post reply on HN