Earlier quoted context omitted.
It doesn't seem like they verify every app to ensure it is free from malware. Since they respond in the affirmative if they app is signed (by not warning), it seems reasonable for a lay person to believe that an app that doesn't throw this warning is free of malware.
"The Apple notary service is an automated system that scans your software for malicious content, checks for code-signing issues, and returns the results to you quickly." https://developer.apple.com/documentation/xcode/notarizing_m...
Can't you just right click?
331–340 of 765 posts
Re: Can't you just right click?
#332Why do so many in tech buy into a walled garden and then bitch about it later? I could say whinge but it doesn't quite convey what I'm seeing here.
Re: Can't you just right click?
#333This feature is at about the right spot for me. It is still convenient enough for me to run software I want that isn't signed, but sufficiently obtuse that neither of my parents have figured it out. Given they are both prone to running any executable that any website tells them to download and run, this feature has probably save me several dozen hours of fixing their computers.
Apple has been making things more and more restrictive over a decade now. New versions of mac os introducing new restrictions. Doesn't take a genius to see that their end goal is to make mac os as restrictive as ios. When that happens, will it still be the right spot for you?
Well, there is no Mac ransomware, right?
Re: Can't you just right click?
#334Earlier quoted context omitted.
IIRC you don’t need to pay for an Apple dev membership to self-sign and run the app on your own device. They made this change a few years ago I believe.
This happens to depend on the code you're trying to run!
Re: Can't you just right click?
#335Earlier quoted context omitted.
I remember RMS saying that the GPL was updated because one "obvious" freedom was not so obvious -- you could meet all the requirements of the GPL, without giving the right to RUN the software. GPL3 allows that. And looking backwards, apple shipped software that was GPL2, but would not ship software that was GPL3. As one example, bash and make all quietly stopped getting updates from apple when the GPL3 versions came…
What's in rootless.h?
Re: Can't you just right click?
#336All of these people saying: switch to Windows, its better than mac! Have you really done that? REALLY? Because I work on Mac, Win10 and Linux every day. And Win10 doesn't even come close to the other two in terms of reliability, stability, and lack of unnecessary bullshit. I just don't understand who can make this claim that Win is better than Macos with a straight face. Maybe for gaming. Maybe. The cost/fps is clear…
I have when I started a new job and they gave me a macbook and said it's the only option. After 2 weeks I told them I'll need a linux box asap or I'll look for a different job.
It's in my opinion the absolute worst garbage of an operating system I've ever had the displeasure of using and their window manager is a completely unusable pile of shit. Their hardware doesn't have proper cooling and burns your hands if you actually use your CPU.
People have different tastes and I really don't think you should assume people haven't tried.
Yes, I too think windows is way better than OSX, but well I also think windows is pretty shit. However, I wouldn't quit my job over having to use windows, I would have for OSX.
Re: Can't you just right click?
#337Hold on a minute -- MacOS phones home every single time you launch an application? As a non-user of MacOS, this strikes me as utterly bonkers. You'd have to place a massive level of trust in the developers of your OS to accept this. And furthermore, surely the constant attempts to phone home have a negative effect on the user experience when the computer's network connection is missing or slow! Perhaps the fine artic…
It's on first launch of an application, but not on subsequent launches of that application.
Re: Can't you just right click?
#338This makes me wonder how open source is supposed to work on macOS. People seem to become more and more aware of it and even enterprises that insisted on support contracts can see that they can't get around open source completely anymore. Meanwhile Apple is removing the ability for me to have a pet project without paying an Apple tax. If the message were completely transparent, something like "The developer didn't pay…
>>I also can't imagine $100 is easy to come up with in countries below level 4[1]
Someone who is developing for Apple platform in specific, has already spent ~$1000 in devices. Say they couldn't afford to build explicitly for Apple[1], they instead develop for web using a Raspberry Pi and try to leverage smartphone capabilities using PWAs; Alas Apple throws in hurdles there as well so that your PWA doesn't function properly on Apple devices[2].
I get it, perhaps this is part of Apple's aspiration i.e. 'You should deserve to be part of the Apple ecosystem' which is enticing to its customers.
But what's overwhelming to me is, Apple's blatant hypocrisy.
Exihibit -1: Data
Apple calls Google by name, questioning its business model around data and proudly calims 'they chose not to do business with data'.
Then why does Apple advertise its products using Google Ads?
So, it's like 'I will call out dirty work, but I will use the results of that dirty work for my own advantage'.
Exihibit -2 : Values
Apple claims itself to be the beacon of human rights.
a. We know Apple was included among list of other companies supplying user data for snooping in the documents highly regarded to be genuine.
b. We know Apple actively cooperates with an autocratic regime and its highly publicised 'Privacy features' isn't applicable there. But, Apple never includes 'USA only' when it advertises it's 'Privacy'. More over when confronted with proof of Apple's platform being actively used for exploitation of minorities, it outright downplayed/dismissed the impact of it.
[2]https://ionicframework.com/blog/is-apple-trying-to-kill-pwas...
Re: Can't you just right click?
#339Re: Can't you just right click?
#340Earlier quoted context omitted.
The checksums are there if they happen to grab the binary in some way that is not "using HTTPS directly from my website" and they'd like to check. Why do the know I'm not writing malware? Trust in my software, mostly? It is unclear that notarization actually stops malware–Apple has failed to explain how it helps, but enforces it by decree.
Pretty easy to figure out what's going on: 1. You submit your app bundle and your credentials to Apple for notarization. 2. Apple records your information and goes through each library, framework, and your code, checking the code signing info and "fingerprint" of each for known malware. 3. Apple issues the ticket for stapling to the app bundle. Now say, for example, that libffmpeg-0.1.2-beta2.dylib is found to mine c…