Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Catalina is checking notarization of unsigned executables

lapcatsoftware.com

Post reply on HN
Print view View original

101–110 of 182 posts

Re: Catalina is checking notarization of unsigned executables

#101

Post by dathinab »

jeremyjh wrote: post #82
MintelIE wrote: post #73

Earlier quoted context omitted.

Are you certain about this? I think I was being conservative. It's easy for us tech nerds in our little gadget bubbles to suppose that everybody is like us. But most people are simple browser users, and Office 365 and Google Docs have all but killed off office software on the desktop for many users.

> Office 365 and Google Docs have all but killed off office software on the desktop for many users. That hasn't been my experience at all. While those tools are definitely used - especially for collaboration - most people on my company's Office 365 subscription are downloading and using the full products for their daily work. This is true in both very large companies and the (non-tech) startup I work at now.

Honestly my experience with collaboration with Office 365 last year was pretty beer bad. At least for sight technical cases people they are many better solutions.

Re: Catalina is checking notarization of unsigned executables

#102

Post by usmannk »

_qulr wrote: post #94
usmannk wrote: post #91

Earlier quoted context omitted.

Ah I see, looks like we're not running quite the same experiment. I suspect that anything including an app bundle ID is going to see some more interesting traffic.

Don't suspect, test. ;-) I'm running both experiments. I've tested and compared script notarization to app notarization. You're getting apparently unusual results with script notarization. So the natural next step would be to compare against app notarization.

Agh, I think it was cert pinning. Looks like the connection is terminated if you're snooping. I see the same results as you now. Thanks!

Re: Catalina is checking notarization of unsigned executables

#103

Post by ancarda »

MintelIE wrote: post #62

Why don't companies come out and tell people what they're doing these days? Telemetry is getting to the point where people such as doctors and lawyers might be violating the law by using a modern computer. And people in the defense industry? Doesn't Apple employ thousands of forns? Who's audited their datasystems and ensured that this stuff stays private? Much easier and better to just stop using it all and move to a…

If only moving to Linux were an option for everyone.

The other day I tried for the 100th time to move to Linux. I installed a recent build of a maintained, popular distribution (no it doesn't matter which one - I have tried them all), on hardware that is famous for it's Linux support.

Everything worked for a day and a half, then the sound just fucking died. No input or output.

I get millions of people use Linux daily, and are happy with it -- I'm genuinely grateful that's a thing. I would love to also use Linux, but I really don't have the time to diagnose why it broke yet again.

Any suggestions for people stuck on macOS? I guess I could block all Apple domains in my DNS resolver? Other than app updates, I can't think of anything that would stop working. That still sounds less painful than trying to deal with Linux's atrocious UX.

Re: Catalina is checking notarization of unsigned executables

#104

Post by salawat »

nojito wrote: post #84
MintelIE wrote: post #62

Why don't companies come out and tell people what they're doing these days? Telemetry is getting to the point where people such as doctors and lawyers might be violating the law by using a modern computer. And people in the defense industry? Doesn't Apple employ thousands of forns? Who's audited their datasystems and ensured that this stuff stays private? Much easier and better to just stop using it all and move to a…

"Telmetry" has been co-opted by the tin foil hat wearing privacy keyboard warriors. It's akin to the people spending tens of thousands of dollars on disaster prep. The only people who lose are the end-users of software. Who are forced to use crappy software.

You mean, like all the software that has been written since companies got into the habit of embedding telemetry in everything? That crappy software?

Telemetry has a specific use-case. Taking measurements in a place you can't go. What industry employs it for nowadays is much closer to spyware in the sense you can get so much more of it done without it producing a noticeable effect for the user in terms of how much work their computer is actually doing. So what if you spin through a couple rounds of telemetry gathering while the user's process is blocked, am I right? Not like they're using it. /s

Re: Catalina is checking notarization of unsigned executables

#105

Post by kgraves »

ancarda wrote: post #103
MintelIE wrote: post #62

Why don't companies come out and tell people what they're doing these days? Telemetry is getting to the point where people such as doctors and lawyers might be violating the law by using a modern computer. And people in the defense industry? Doesn't Apple employ thousands of forns? Who's audited their datasystems and ensured that this stuff stays private? Much easier and better to just stop using it all and move to a…

If only moving to Linux were an option for everyone. The other day I tried for the 100th time to move to Linux. I installed a recent build of a maintained, popular distribution (no it doesn't matter which one - I have tried them all), on hardware that is famous for it's Linux support. Everything worked for a day and a half, then the sound just fucking died. No input or output. I get millions of people use Linux daily…

> Everything worked for a day and a half, then the sound just fucking died. No input or output.

my condolences.

Re: Catalina is checking notarization of unsigned executables

#106

Post by gorgoiler »

ancarda wrote: post #103
MintelIE wrote: post #62

Why don't companies come out and tell people what they're doing these days? Telemetry is getting to the point where people such as doctors and lawyers might be violating the law by using a modern computer. And people in the defense industry? Doesn't Apple employ thousands of forns? Who's audited their datasystems and ensured that this stuff stays private? Much easier and better to just stop using it all and move to a…

If only moving to Linux were an option for everyone. The other day I tried for the 100th time to move to Linux. I installed a recent build of a maintained, popular distribution (no it doesn't matter which one - I have tried them all), on hardware that is famous for it's Linux support. Everything worked for a day and a half, then the sound just fucking died. No input or output. I get millions of people use Linux daily…

Vagrant.

https://www.vagrantup.com/downloads.html

Spin up a Linux box in macOS and ssh into it directly. It is a true joy if you are comfortable working with text files (programming, admin, focused writing, etc.)

It will default to using VirtualBox as the underlying virtualization. That works a treat and hides all the GUI madness of VirtualBox.

However, if you open up VirtualBox then you can interact with the host you just created with “vagrant up” just fine, including using a graphical environment.

Re: Catalina is checking notarization of unsigned executables

#107

Post by NikolaeVarius »

MintelIE wrote: post #62

Why don't companies come out and tell people what they're doing these days? Telemetry is getting to the point where people such as doctors and lawyers might be violating the law by using a modern computer. And people in the defense industry? Doesn't Apple employ thousands of forns? Who's audited their datasystems and ensured that this stuff stays private? Much easier and better to just stop using it all and move to a…

It would be nice if my laptops bluetooth and audio would work > 99% of the time. Right now its a crapshoot

Re: Catalina is checking notarization of unsigned executables

#108

Post by ancarda »

gorgoiler wrote: post #106
ancarda wrote: post #103

Earlier quoted context omitted.

If only moving to Linux were an option for everyone. The other day I tried for the 100th time to move to Linux. I installed a recent build of a maintained, popular distribution (no it doesn't matter which one - I have tried them all), on hardware that is famous for it's Linux support. Everything worked for a day and a half, then the sound just fucking died. No input or output. I get millions of people use Linux daily…

Vagrant. https://www.vagrantup.com/downloads.html Spin up a Linux box in macOS and ssh into it directly. It is a true joy if you are comfortable working with text files (programming, admin, focused writing, etc.) It will default to using VirtualBox as the underlying virtualization. That works a treat and hides all the GUI madness of VirtualBox. However, if you open up VirtualBox then you can interact with the host yo…

I've never used that before, but it sounds a bit like Docker? As in, it's got a VM in the background and I can interact with it?

Re: Catalina is checking notarization of unsigned executables

#110

Post by userbinator »

abathur wrote: post #87
LeoPanthera wrote: post #74

I can't reproduce the exact test specified in the article: $ echo $'#!/bin/sh\necho Hello' > /tmp/test.sh && chmod a+x /tmp/test.sh $ time /tmp/test.sh && time /tmp/test.sh Hello real 0m0.016s user 0m0.002s sys 0m0.010s Hello real 0m0.006s user 0m0.002s sys 0m0.004s I don't believe the 0.01s difference is long enough, and could easily explained by filesystem caching. The article says: > Some people try to explain awa…

A few ideas: 1. confirm the checks are enabled: spctl --status 2. Make sure your terminal/shell/etc aren't already exempted System Preferences > Security & Privacy > Developer Tools. 3. If you already ran something that could generate a check in the last minute, the connection is still open. Most of the overhead people are recording is negotiation/handshake. If you're fairly close to the server, it seems plausible yo…

I don't have a system to check this on, but Apple seriously named an option "asses"?
Post reply on HN