macOS Sequoia is available today • Hacker News Board

Re: macOS Sequoia is available today

#451

Post by willtemperley » Tue, Sep 17, 2024, 2:12 AM UTC

chongli wrote: post #333

user3939382 wrote: post #252

Earlier quoted context omitted.

The way it's even implemented now is like the nightmare realized from everything Richard Stallman warned about for decades. Especially for non-technical users, they've practically implemented a system where Apple decides what software you are and aren't allowed to run on your own computer. They can muddy the issue by claiming it's for safety/security but I don't buy it. They could have made the override still clear b…

Especially for non-technical users, they've practically implemented a system where Apple decides what software you are and aren't allowed to run on your own computer. For non-technical users the choice is simple: either Apple decides what is allowed to run on their computer or cybercriminals do. After years of getting burned, non-technical users made their choice. I think it was the right one but the jury's still out…

It’s still perfectly possible to run whatever you like on Mac via virtualisation, which Apple have tried to make easy with a reasonably decent API

Re: macOS Sequoia is available today

#452

Post by jonathanyc » Tue, Sep 17, 2024, 2:21 AM UTC

iknowstuff wrote: post #363

gorkish wrote: post #339

Earlier quoted context omitted.

Do you still have to quit and restart the entire application after you give the permission? Holy shit mac users are gonna become a meme in meetings. MacOS is turning into quite the poo log lately. I respect that Apple has every right to completely destroy the legacy of the Macintosh, but they are slow playing it so that it's just a little bit better than the alternatives. The end result is my life gets just a little…

Lol calm down its only for apps which failed to upgrade to their new window selector API.

Ironically, the last time I checked, the built in screencapture command-line program hadn’t been updated to use ScreenCaptureKit yet. The company I was contracting for ended up shelling out to it because its window picking UX was a lot better than ScreenCapureKit’s. (You can’t do this if you’re sandboxed, though, AFAIK).

Re: macOS Sequoia is available today

#453

Post by dangus » Tue, Sep 17, 2024, 2:23 AM UTC

xlii wrote: post #35

I recently got bored of Apple ecosystem. Was considering buying System76 for work, but thought that iPhone Mirroring feature would be really neat and decided to wait. Turns out it’s not available in EU because yadda yadda Apple threw a fit. Oh well.

Honestly I find it a bit hilarious that you thought the iPhone mirroring feature was "the one" that would keep you on the platform.

The last thing I want to do is operate my phone with a trackpad/mouse and keyboard.

Re: macOS Sequoia is available today

#454

Post by benkuykendall » Tue, Sep 17, 2024, 2:25 AM UTC

LeoPanthera wrote: post #309

switch007 wrote: post #180

Earlier quoted context omitted.

$ jq '.[] | messages | .thank_you' wait, maybe it's... $ jq '. | .messages.thank_you' darn it! how about $ jq '[].messages.thank_you' !??@@!

Figuring out what garbage to type into jq is the best thing about ChatGPT.

For some reason, I find it kinda funny you don't just ask the LLM to extract the values for you. Practically, your solution makes a lot of sense -- way fewer tokens, less likely to make weird one-off errors, can verify the response makes basic sense or re-use the code off-line or with sensitive data...

But if I were watching Star Trek, they would definitely just ask the computer to grab the fields and it would be a done deal!

Re: macOS Sequoia is available today

#455

Post by dangus » Tue, Sep 17, 2024, 2:27 AM UTC

skydhash wrote: post #160

andrelaszlo wrote: post #106

Earlier quoted context omitted.

How's your experience? I'm tempted but have so many questions: - Which mac are you using? - Any missing hardware support? - Dual booting? - How's Bluetooth? - Anything else that was surprising, scary, or disappointing?

It's both on my Mac Mini and my MBA (both M1). It work great on the Mini. I think bluetooth work, but I have no use for it and have never checked. Everything works great as far as I know (even virtualization with qemu). I don't game on it, so can't say anything about that. As for the MBA, suspend is still a miss (I read that the asahi team can't get certain devices to go to deep sleep, so they chose a safer low power…

Personally if I'm going Linux, I'm out on Mac hardware.

Don't get me wrong, Mac hardware is nice hardware. But there's no reason to own it if you're using alternative operating systems.

The bang for your buck on computing is wildly better on something like a Beelink mini PC than a Mac Mini. Windows laptop hardware has also most definitely caught up to the M1.

And I think we all know you listed off everything that's gonna be broken with Asahi Linux like Bluetooth and microphone as something you "don't use" just because you know it's broken.

Re: macOS Sequoia is available today

#456

Post by NetOpWibby » Tue, Sep 17, 2024, 2:29 AM UTC

selcuka wrote: post #445

NetOpWibby wrote: post #250

Earlier quoted context omitted.

Cmd+Z

Only if you notice that you've deleted something.

Okay so, seeing as this is me running this command on my computer...I'd notice I deleted something accidentally.

Re: macOS Sequoia is available today

#457

Post by Nextgrid » Tue, Sep 17, 2024, 2:30 AM UTC

threeseed wrote: post #323

Nextgrid wrote: post #224

Earlier quoted context omitted.

It is sad to see such a misinformed take on a technical forum. You can already do everything you want. It will take some reverse-engineering work, but it's possible. Similar things were said about iMessage interoperability with Android, until Beeper proved them wrong. They managed to reverse-engineer it, build a compatible client and clearly proved Apple's claims were BS (and no, this didn't lead to a mass-scale comp…

> the reverse-engineering requirement would become an insignificant hurdle compared to the value of such a vulnerability The idea that breaking device attestation that is secured through Secure Enclave hardware i.e. not accessible from user code is an insignificant hurdle is hilariously ridiculous. It is borderline impossible for any ordinary developer. And people that bring up the "just ask the user" argument clearl…

You're approaching this from the idea that the impenetrability by third-parties is the primary security feature.

If this is true, then my worry isn't even about malicious attackers, it's my neighbor (with a real Mac) being able to (accidentally!) eavesdrop on my phone screen (since according to you this is the primary security measure).

It's obviously ridiculous, and the primary security measure is that there must be a prior key exchange and consent step. If that part is secure, then it would be secure against a third-party.

If that part is not secure, then no Secure Enclave-ing will help you, because worst case scenario, the attacker can just use a real Mac as part of his attack to pass the secure-enclave-protected authentication step, or just exploit the good old "analog hole" by using the real Mac as the main attack vector (and then just capture its HDMI output and feed in inputs via a USB-capable microcontroller simulating a keyboard).

Re: macOS Sequoia is available today

#458

Post by shepherdjerred » Tue, Sep 17, 2024, 2:31 AM UTC

jezek2 wrote: post #435

simonask wrote: post #345

Earlier quoted context omitted.

Really? This is _huge_ to you? How many unsigned apps are you downloading and running? This is one of those features where the benefits seem to very obviously outweigh the drawbacks. 99.9% of users just aren't running unsigned software, so the moment that happens, it is most certainly malware. If you're developing software yourself, this isn't an issue either, since all the relevant toolchains, debuggers, etc., work…

As a creator of a programming language that can compile binaries of any supported platform from any platform it is an unsolveable problem. I can't do the signing as it requires Apple stuff. Not to mention it is unethical to require it as it's used for gatekeeping not just security (requiring Apple to decide if you can run an executable is unacceptable). Compare it to Android where you can use self-signed certificates…

You can sign macOS executables without macOS hardware

Re: macOS Sequoia is available today

#459

Post by rpdillon » Tue, Sep 17, 2024, 2:33 AM UTC

quesera wrote: post #403

whywhywhywhy wrote: post #332

Earlier quoted context omitted.

lets stop pretending this is anything other than trying to make apps that don't pay $100 a year feel scary.

Are you suggesting that Apple is making it less convenient for users to run unsigned binaries, because they want to increase developer program revenue?

Not developer program revenue. At every turn where they have a choice, Apple does the same thing: sell devices increasingly locked to their own ecosystem, and sell it as a feature to protect folks. This strategy works really well: they actually have folks arguing that giving all Apple users fewer choices is a feature.

They have been ratcheting down on freedom in OS X (and then MacOS) since 2011 or so when I stopped using Apple for personal use. The introduction of the Mac App Store, subsequent lackluster performance, and introduction of scary warnings about running unsigned code in MacOS tell most all of the story. This latest update is just another step in that direction, making running unsigned code that much more difficult. The obvious endgame is to raise the next generation of Mac users to only use the Mac App Store for software, effectively replicating the golden goose that the iOS App Store has proven to be.

Re: macOS Sequoia is available today

#460

Post by Nextgrid » Tue, Sep 17, 2024, 2:34 AM UTC

threeseed wrote: post #315

Nextgrid wrote: post #227

Earlier quoted context omitted.

Many people log into their Mac using the same credentials (Apple ID) that give access to the Health data, and in fact Apple makes it really hard or even impossible to use it without (you can't selectively grant access, you need to use a separate Apple ID but then you lose some useful features such as universal clipboard, etc). This is again a misinformed take. Your Mac can already get all your iPhone's data from the…

> Your Mac can already get all your iPhone's data from the cloud Only if the data is available in iCloud and it is stored in files and it is not encrypted. Otherwise data from apps like Instagram will be exposed exclusively via screen sharing.

> Only if the data is available in iCloud and it is stored in files and it is not encrypted.

Health data is available in there, just to go after your example. iPhone backups are also available in there.

At no point am I being asked anything else beyond my Apple ID, password, and two-step approval on another device (such as the Mac) to set up a new iPhone and download all my data.

Thus the outcome is that the Mac indeed has everything it needs to get access to all your iCloud data. In fact, reverse-engineering how to get it directly is unnecessary work - instead, just reverse-engineer enough to capture the Apple ID password (or prompt to it - given there's still no way for the user to tell a real system dialog from one drawn by malware) and approve the 2FA prompt, get an actual, real iPhone and sign into the person's account and then extract all the data from there (via screenshots if necessary).