Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Can't you just right click?

lapcatsoftware.com

Post reply on HN
Print view View original

221–230 of 765 posts

Re: Can't you just right click?

#221

Post by saagarjha »

ccmcarey wrote: post #191
saagarjha wrote: post #115

Earlier quoted context omitted.

That's exactly what I'm confused about, where is the slippery slope? It's an extra step in your build process–an annoyance, not a slope. It's like if there was a requirement that macOS would not run binaries unless you stuck "APPLEISCOOL" at the front of all your binaries.

but who does this new step help?

As far as I understand, there are (surprisingly many) different code paths in the operating system based on whether a binary is signed or not and I would guess that Apple no longer wants to keep around the one where unsigned binaries are a thing.

Re: Can't you just right click?

#222

Post by Wohlf »

gpanders wrote: post #202
manquer wrote: post #154

Earlier quoted context omitted.

You stop using Apple and go to a reasonable OS. You and I are not going to help Apple keep their $2T valuation, we are no longer the market not been one for 5 + years for Apple Apple moved their focus from the professional market who were willing to pay premium for productivity with better UX/Hardware/Software, to people paying just the premium . It is a lifestyle brand now, people money because it is Apple, not beca…

While I also find these changes to macOS alarming and disappointing, I still vastly prefer macOS to Windows. My 2013 Macbook Pro is also still the best laptop I have ever used (I also have a 2017 Macbook Pro for work and I have to admit that the newer models rightfully earn their bad reputation). If Apple continues to head in this direction, I think the right move is to migrate to Linux. Windows is a huge step back,…

You may be surprised how much equivalent laptops from other OEMs have caught up. The Dell XPS is very similar to the Macbook Pro, and Dell supports Ubuntu on it.

Re: Can't you just right click?

#223

Post by saagarjha »

donarb wrote: post #195
saagarjha wrote: post #46

Earlier quoted context omitted.

Question for you: what exactly does Notarization protect against? I have watched all the videos about it, I read the developer documentation, I notarize my apps because it is required by the OS…but I still have not gotten a single good explanation as to why it's useful. Apple claims that the process is extremely tolerant…so does it try to accept everything but blatant malware? Does it let malware through? What happen…

If you remember Handbrake had a version of their app hacked and uploaded to a distribution server.

I do. If I remember correctly, it was the website that was hacked, not the signing certificate that Handbrake used (in fact, I think it used none). Code signing would have worked here.

Re: Can't you just right click?

#224

Post by shakna »

dwaite wrote: post #159
shakna wrote: post #38

Earlier quoted context omitted.

> Applications should see nothing but their executable jail, and whatever was intentionally allowed to them by the user Whilst this works for some programs, it gets... Difficult... When dealing with others. What permissions should sh get, for example? And do the programs it will call inherit the same, or do they get their own permissions, or a hybrid?

> What permissions should sh get, for example? The permission model works pretty similar here to a restricted user account. It sees system files as read-only, cannot see the contents of certain files and directories, etc. The root of the filesystem might be of the parent system or of the sandbox itself. On macOS, reading certain directories (like the user's Desktop) will result in a user consent prompt due the sensit…

The question was more about _should_, than _does_, and there's all sorts of places it currently breaks down.

For example, say you use pass [0], it's just a Bash script. You want it to be able to access pbcopy/pbpaste, for basic functionality to work. You don't want to give it permission every time.

However, you probably don't want sh to be able to access pbcopy/pbpaste without permission.

Scripts themselves should hold certain permissions, but those permissions are currently held by their host application, because sh /usr/local/bin/pass isn't identified by the system as an application. The app is still considered to be sh.

[0] https://www.passwordstore.org/

Re: Can't you just right click?

#225

Post by saagarjha »

csense wrote: post #175

"Y'know, it sure would be a shame if our OS went around telling users your software's a virus. Now we c'n make sure this little problem doesn't happen to you, all you gotta do is fork over the $300 (yearly of course) to join our developer program." Nothing like a good old protection racket. No wonder Apple's worth trillions of dollars.

$100/year

Re: Can't you just right click?

#226

Post by bzb4 »

wwright wrote: post #67
bzb4 wrote: post #37

Earlier quoted context omitted.

I think people are mostly bitching about iOS, since it will be impossible to run the game on iPhones and iPads anymore at all.

AFAIK this is false, though I could be wrong. I believe cancelling the account is separate from revoking the apps. I think Apple has only deleted installed apps off of user’s phones in rare, exceptional cases, such as actively malicious apps. Can anyone confirm if I am recalling this correctly?

Apple probably won’t delete the app from user phones, but it won’t be available to new users anymore (those who have never downloaded the app using their Apple account) and Epic will be unable to submit new updates to the App Store, which in practice kills the app

Re: Can't you just right click?

#227

Post by jussij »

recursive wrote: post #163
oneplane wrote: post #15

Earlier quoted context omitted.

Open source projects sign their Apps like anyone else. Works fine. They do the same on Windows of course and on Linux package managers.

In my experience, open source installers for windows are mostly not signed. But windows has a button to let you run them though.

Windows 10 also does it's best to try and stop users from running unsigned code, by making the UI complicated.

When Windows 10 finds an unsigned installer it shows a dialog with a Don't Run button and as the name suggest clicking that button does not run the installer.

To run the installer the user needs to first click on the More Info link which will then present the user with an option to Run the installer.

Here's an example: https://www.zeusedit.com/images/zeus_install.png

Re: Can't you just right click?

#228

Post by aaomidi »

aaomidi wrote: post #27
dec0dedab0de wrote: post #23

I dont see any problem with this. If you don't feel comfortable doing this then you definitely shouldn't be running random code from the internet. I would take it a step further and force it to be run from the command line. Also, what kind of "viable software business" has trouble paying $100 a year?

Any open source developer? Do you know how much $100 is in Iran?

Also this is a fun thing Snapp did in Iran: https://www.theverge.com/2020/1/28/21112467/iran-ridesharing...
Post reply on HN