Live data from Hacker News

Apple’s macOS Ventura – New Security Changes

sentinelone.com

151–160 of 193 posts

Re: Apple’s macOS Ventura – New Security Changes

#151

Mostly off-topic: have Apple and Microsoft completely given up on non-trivial changes to desktop operating systems? Will MacOS look basically the same in 40 years? Or is the idea that everything will be AR/VR by then and there is no use innovating in this domain?

Do you have specific improvements in mind, or are you saying you want them to change stuff just for the sake of changing it?

Re: Apple’s macOS Ventura – New Security Changes

#152
post #4
post #2

> However, the Gatekeeper check here is overridable by users. This is presented as a flaw, but I'm not sure they are thinking through the alternatives. It's hard to give too much credence to security experts who are't thinking holistically. Perhaps there is a flaw, but I'm curious to know what it is.

Things the user can override are things social engineers can convince users to override.

To which my answer is — being alive is risky, get over it and stop treating all people like idiots that need constant oversight lest they do something potentially dangerous.

Re: Apple’s macOS Ventura – New Security Changes

#154
post #17

Earlier quoted context omitted.

I can picture a big cat in my mind. That helped to peg OS X releases and enabled me to mentally distinguish and order them. I can't picture "Monterey" or "Ventura" or any other macOS names, they have no meaning to me.

Ventura has a meaning to me.... Ace Ventura, a cartoon from my childhood about a egotistical questionably competent detective. I'm not sure that's the image Apple wants to give off though...

Ventura was also the home of Chouinard Equipment, later renamed to Black Diamond Equipment, and is the base of Patagonia, a clothing company.

Re: Apple’s macOS Ventura – New Security Changes

#155
I don't think number 2 (specifically the complaint that the user can override gatekeeper) in their list is really an issue for enterprises. If they want they can already turn off the gatekeeper user override through a profile. I do exactly that on our Macs.

And for consumers I don't think it's a good idea to remove this option altogether. The owner should have full control if they desire it.

The constant check for modifications is great though. I'm surprised that wasn't the case before.

Re: Apple’s macOS Ventura – New Security Changes

#156

Somewhere between Mountain Lion and High Sierra, it became impossible to delete or even mark non-executable various annoying built-in applications which I never use, e.g. iTunes.app and Safari.app, which often open without me asking them to. Does anyone know how to re-enable this functionality?

As of Big Sur it's impossible. The entire OS is now a single cryptographically signed image that's verified on boot, which is great for security but it includes some things that don't particularly need to be locked down.

Re: Apple’s macOS Ventura – New Security Changes

#157

Lets hope the open core project, namely the Open Core Legacy Patcher[1] will revive some older models to run Ventura. Personally, I'm running a 2014/15 Macbook Air 11" for 7 years now[2] and with "Open Core Legacy" on Monterrey with no issues at all. [1] https://dortania.github.io/OpenCore-Legacy-Patcher/MODELS.ht... [2] Except the mainboard, display and shell everything else thats modular (wifi card, ssd, battery an…

There was this guy called dosdude on macrumors that made these excellent patch sets to get them mostly working with unsupported versions.

But it involved a lot more than just firmware. And there were lots of known issues with some configurations.

I'll check that software out though, perhaps I can run Mojave on my 2010 mbp, I really miss the dark mode

Re: Apple’s macOS Ventura – New Security Changes

#158
post #58

Nothing terribly major here, it sounds like. Making login items visible is a long-overdue change... but none of these are going to have any particular impact on average users or average apps. On a pettier note, can we get a better source than a website that's using JS to change its title when it doesn't have focus to try to gain attention? (It toggles about every second between "macOS Ventura | 7 New Security Changes…

There’s a lot of changes under the hood that this post doesn’t mention.

Re: Apple’s macOS Ventura – New Security Changes

#159
post #144

At least two other security changes: - userspace filesystems: the nail on the coffin for kernel extensions. Now we won't need to run in "reduced security" to use FUSE and that was the last kernel extension that remained popular. Probably kexts will be deprecated shortly - rapid security response - it seems also to include changes in Xprotect and mrt

> the nail on the coffin for kernel extensions The OpenZFS implementation on macOS also requires kernel extensions, and I don't suppose it can easily be ported to FUSE or that that would have desirable performance characteristics. Special kernel extensions are also required to get some basic functionality working on macOS these days, like disabling pointer acceleration.

> disabling pointer acceleration

Could you point me to the kext that does that? I’ve been trying to find a way to disable it for ages.

Re: Apple’s macOS Ventura – New Security Changes

#160
post #138

Most concerning is Gatekeeper, as I do still routinely run into scenarios where it harassess me about applications I am trying to run and on the odd occasion I have to manually codesign things. It will be super annoying if this now starts making developer's life hell because it is nannying binaries they are building, sharing or working with as part of their development work.

You can completely disable Gatekeeper if it annoys you: $ sudo spctl --master-disable

I’ve done this a few times but still get nagged when launching unsigned apps for the first time. Is that part of a different security mechanism?
Post reply on HN