Live data from Hacker News

Apple’s macOS Ventura – New Security Changes

sentinelone.com

141–150 of 193 posts

Re: Apple’s macOS Ventura – New Security Changes

#141
post #138

Most concerning is Gatekeeper, as I do still routinely run into scenarios where it harassess me about applications I am trying to run and on the odd occasion I have to manually codesign things. It will be super annoying if this now starts making developer's life hell because it is nannying binaries they are building, sharing or working with as part of their development work.

[deleted]

Re: Apple’s macOS Ventura – New Security Changes

#142
post #138

Most concerning is Gatekeeper, as I do still routinely run into scenarios where it harassess me about applications I am trying to run and on the odd occasion I have to manually codesign things. It will be super annoying if this now starts making developer's life hell because it is nannying binaries they are building, sharing or working with as part of their development work.

If you're building, you can designate something as a developer tool and gatekeeper will ignore it.

Re: Apple’s macOS Ventura – New Security Changes

#143
post #3

Am I the only one increasingly frustrated with macOS's naming scheme? I have no idea what the latest version is. Ubuntu versioning gets this right; you can parse their codenames alphabetically to derive the semantic version. But Apple's heuristic here seems to be "throw a dart at a map of California".

Future versions will be named Bakersfield, Weed, and Needles, not to mention Oxnard?

Re: Apple’s macOS Ventura – New Security Changes

#144

At least two other security changes: - userspace filesystems: the nail on the coffin for kernel extensions. Now we won't need to run in "reduced security" to use FUSE and that was the last kernel extension that remained popular. Probably kexts will be deprecated shortly - rapid security response - it seems also to include changes in Xprotect and mrt

> the nail on the coffin for kernel extensions

The OpenZFS implementation on macOS also requires kernel extensions, and I don't suppose it can easily be ported to FUSE or that that would have desirable performance characteristics.

Special kernel extensions are also required to get some basic functionality working on macOS these days, like disabling pointer acceleration.

Re: Apple’s macOS Ventura – New Security Changes

#145
post #82

Lets hope the open core project, namely the Open Core Legacy Patcher[1] will revive some older models to run Ventura. Personally, I'm running a 2014/15 Macbook Air 11" for 7 years now[2] and with "Open Core Legacy" on Monterrey with no issues at all. [1] https://dortania.github.io/OpenCore-Legacy-Patcher/MODELS.ht... [2] Except the mainboard, display and shell everything else thats modular (wifi card, ssd, battery an…

May be off topic but this had me thinking. Will Safari 16 be available on older macOS? Assuming Apple doesn't break their tradition it should support two prior OS release, Monterey and Big Sur. While I could do without an OS update on my MacBook Pro 2015. ( I cant record a single useful feature from all the previous OS update other than Universal Clipboard ) That means for MacBook Pro 2015 Model users they will only…

Will Safari 16 be available on older macOS?

Short answer: you'll get all of new web platform features (Container Queries, Subgrid, etc.); you may not get certain Safari-specific features that require a feature only present in macOS Ventura.

You can get Safari Technology Preview for Monterey and Big Sur that has those new web platform features right now [1].

[1]: https://developer.apple.com/safari/technology-preview/

Re: Apple’s macOS Ventura – New Security Changes

#146
post #50

> " Passkeys aim to solve the problems with passwords " So are you locked in with Apple if you use this, or can you switch all your existing passwords to another "passkey provider/service" ? > " Wave Goodbye to CAPTCHAS " I assume that's Safari only... so this is bad news for Firefox?

curious too as someone that uses 7 computers running 3 OSes, are my passkeys accessable, syncable, across OSes?

One obvious solution is to use a cross-platform password manager that supports Passkeys [1].

[1]: https://blog.1password.com/1password-is-joining-the-fido-all...

Re: Apple’s macOS Ventura – New Security Changes

#147
post #137

Earlier quoted context omitted.

What's your concern regarding Bitwarden?

Not the original poster, but I think the worry is that how can a password manager survive in a passwordless future. Will major players be too powerful that no competing solutions will realistically exist.

That's exactly my concern. I am the OP you refer to. BitWarden is a great product and an open source one at that.

I suppose that passwords will always be a thing for the paranoids amongst us. But i don't know whether that is enough to sustain the product.

Re: Apple’s macOS Ventura – New Security Changes

#148
post #98

Earlier quoted context omitted.

There is that: https://threedots.ovh/blog/2022/06/quick-look-at-user-mode-f... But userspace filesystems are already present in iOS so you can find some reverse engineered info on that (e.g. in Jonathan Levin's books)

Thanks

Note that UVFS is currently not exposed to third parties.

For your own 3rd-party file systems, you'll still have to use a kernel extension for now. (or local NFS mount).

Re: Apple’s macOS Ventura – New Security Changes

#149
post #4

Earlier quoted context omitted.

Things the user can override are things social engineers can convince users to override.

Yes. Note that thus is the technical argument for disallowing sideloading.

Let's also ban antifreeze because someone could kill you by socially engineering you into drinking it.

Re: Apple’s macOS Ventura – New Security Changes

#150
post #84

> Gatekeeper’s role is to ensure that when users execute some code, that code meets the local system policy. The policy includes checks such as whether the code is validly signed and whether it has been tampered with in certain ways. Weasel-word alert. I never thought I’d see the day when technologists would applaud the gradual death of general-purpose computing, but here we are. A decade from now Apple probably won’…

> A decade from now Apple probably won’t even ship a local version of Xcode, and the transformation will be complete as all new development happens in Xcode Cloud where no line of code goes unscrutinized by the watchful eye of the mother ship. Any young folks wondering: yes, this exact same thing was being posted ten years ago, all the time. "Apple's gonna totally lock down macOS without any way around it, they hate…

Do you not see that every new macOS release is a few more steps towards that dystopia?
Post reply on HN