Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Can't you just right click?

lapcatsoftware.com

Post reply on HN
Print view View original

351–360 of 765 posts

Re: Can't you just right click?

#351

Post by thinkloop »

lucb1e wrote: post #2

This makes me wonder how open source is supposed to work on macOS. People seem to become more and more aware of it and even enterprises that insisted on support contracts can see that they can't get around open source completely anymore. Meanwhile Apple is removing the ability for me to have a pet project without paying an Apple tax. If the message were completely transparent, something like "The developer didn't pay…

> or whatever it is that Apple does with that money

What they primarily "do" is have an identity to sue or pursue in case of issues. That keeps everyone in line.

Re: Can't you just right click?

#352

Post by tialaramex »

spideymans wrote: post #303
floatboth wrote: post #253

Earlier quoted context omitted.

IIRC, the CAs Windows trusts charge absolutely ridiculous amounts of money, unless something has changed recently.

Which CAs are available for Windows, and how much do they cost, out of curiosity? Not a Windows developer.

Certificate Authorities trusted by Microsoft for the purpose of Code Signing would need to issue you a certificate with the appropriate EKU (Extended Key Usage, saying this is for Code Signing). Technically a user could add some CA you span up for this purpose to their Windows install, but if you're going to all this bother you could just get them to click past the warning of course...

The CCADB can tell you which CA roots are trusted by Microsoft for this purpose:

https://ccadb-public.secure.force.com/microsoft/IncludedCACe...

You're looking for a CA which has Microsoft Trust Bits including Code Signing, and Microsoft Status of "Included"

Price: A couple of hundred bucks per year. Vendors with very well known brands like DigiCert's "Symantec" brand (famous despite the fact Symantec actually ran their CA so terribly they ended up selling the brand to DigiCert... the CA they'd operated was distrusted) maybe $500 and year and higher. But your users don't care about the brand, so pick a cheaper product like Sectigo's they work just the same.

It's a little more expensive if you want "Extended Validation" aka "EV Code Signing". If you write Windows kernel drivers you need this, otherwise it might only make the UI shown to inquisitive users nicer so don't bother unless you hate money.

NB. Yes ISRG (the people behind Let's Encrypt) are trusted by Microsoft but no they aren't trusted to provide Code Signing certificates, even if they wanted to, which they do not.

Re: Can't you just right click?

#353

Post by PetahNZ »

arczyx wrote: post #325
fizzled wrote: post #310

All of these people saying: switch to Windows, its better than mac! Have you really done that? REALLY? Because I work on Mac, Win10 and Linux every day. And Win10 doesn't even come close to the other two in terms of reliability, stability, and lack of unnecessary bullshit. I just don't understand who can make this claim that Win is better than Macos with a straight face. Maybe for gaming. Maybe. The cost/fps is clear…

>but I think a lot of people on this thread have never even used a mac for more than five minutes, let alone developed on one. HN monoculture is real. I for one, use mac and develop on it for my job, and I like windows significantly more than mac. Dunno how many people here are like me, but I don't think this kind of assumption is fair.

Number 2 here, use Mac as my day job, Windows for side jobs/home, Linux for server and things like media boxes. I prefer Windows.

Re: Can't you just right click?

#354

Post by jolux »

saagarjha wrote: post #340
rmrfrmrf wrote: post #251

Earlier quoted context omitted.

Pretty easy to figure out what's going on: 1. You submit your app bundle and your credentials to Apple for notarization. 2. Apple records your information and goes through each library, framework, and your code, checking the code signing info and "fingerprint" of each for known malware. 3. Apple issues the ticket for stapling to the app bundle. Now say, for example, that libffmpeg-0.1.2-beta2.dylib is found to mine c…

Why can’t Apple just push that through XProtect?

Why not do both?

Re: Can't you just right click?

#355

Post by mellow2020 »

rrrrrrrrrrrryan wrote: post #288
throwaway13337 wrote: post #189

Earlier quoted context omitted.

They never had a choice. There seems to be a trend in the US society today to error more on the side of safety than liberty than I've seen ever before. Particularly, this is a change in the tech community which has been a bastion in the fight for individual freedoms since I've been alive. In the end, when you make that bargain at the levels we are making it today, the safety is only temporary but the damage to libert…

Most people would hypothetically eagerly trade a miniscule amount of freedom for a massive amount of security, because it'd be a good deal. You're welcome to be an ideologue and paint the world in black and white of course, but more people will try to assess the tradeoffs and have some appreciation for nuance. Obligatory disclaimer: I'm a staunch supporter of open source software and don't own any Apple devices becau…

The majority of people is fine living their lives as to ensure to destruction of all organized human life on the planet, just when it comes to the climate. Thinking of history, all the darkest hours of it involve a majority thinking they're right automatically, by virtue of being the majority, and persecuting minorities, or doing all sorts of stuff that in hindsight is just evil, embarrassing and gross.

> Free thought requires free media. Free media requires free technology. We require ethical treatment when we go to read, to write, to listen and to watch. Those are the hallmarks of our politics. We need to keep those politics until we die. Because if we don’t, something else will die. Something so precious that many, many of our fathers and mothers gave their life for it. Something so precious, that we understood it to define what it meant to be human; it will die.

-- Eben Moglen

If people don't understand that it takes away from them, not from the importance of the issue.

Re: Can't you just right click?

#356

Post by Abishek_Muthian »

Gorbzel wrote: post #347
Abishek_Muthian wrote: post #338

Earlier quoted context omitted.

Apple is an aspiration selling company. >>I also can't imagine $100 is easy to come up with in countries below level 4[1] Someone who is developing for Apple platform in specific, has already spent ~$1000 in devices. Say they couldn't afford to build explicitly for Apple[1], they instead develop for web using a Raspberry Pi and try to leverage smartphone capabilities using PWAs; Alas Apple throws in hurdles there as…

PWAs are terrible, but that debate has nothing on the real gem here: > ...Then why does Apple advertise its products using Google Ads? Congratulations, this cracks top 5 oddest Apple hater argument ever posted in this land of many of 'em.

Hate is a very strong word, something which I wouldn't give a private business luxury of buying from me.

If you could give a justifiable answer to what you've quoted from me, I'm all ears.

Re: Can't you just right click?

#357

Post by thinkloop »

Gorbzel wrote: post #347
Abishek_Muthian wrote: post #338

Earlier quoted context omitted.

Apple is an aspiration selling company. >>I also can't imagine $100 is easy to come up with in countries below level 4[1] Someone who is developing for Apple platform in specific, has already spent ~$1000 in devices. Say they couldn't afford to build explicitly for Apple[1], they instead develop for web using a Raspberry Pi and try to leverage smartphone capabilities using PWAs; Alas Apple throws in hurdles there as…

PWAs are terrible, but that debate has nothing on the real gem here: > ...Then why does Apple advertise its products using Google Ads? Congratulations, this cracks top 5 oddest Apple hater argument ever posted in this land of many of 'em.

> PWAs are terrible

Why again? In the world of silos and proprietary platforms it's an absolute godsend that PWAs even exist.

Re: Can't you just right click?

#358

Post by plorkyeran »

nikisweeting wrote: post #247
saagarjha wrote: post #139

Earlier quoted context omitted.

It's not tied to a key at all, it's basically just a hash (read: the checksum kind) with no authenticity guarantees as to who signed the binary.

To the average user, yes, but Apple can see the chain of trust and can do the data science required to figure out who signed what. You better believe that in the even of a large scale malware distribution via signed binaries, they're going to be revoking those certs and tracking down the accounts responsible (like after the VLC website hack).

There is no certificate involved in ad-hoc code signing. It's just a hash with no identity or chain of trust involved.

Re: Can't you just right click?

#359

Post by EugeneOZ »

LocutusOfBorges wrote: post #291
Wohlf wrote: post #222

Earlier quoted context omitted.

You may be surprised how much equivalent laptops from other OEMs have caught up. The Dell XPS is very similar to the Macbook Pro, and Dell supports Ubuntu on it.

The XPS line had some of the worst speakers I’ve ever heard on a laptop up until the 2020 revision- and some of the worst build quality issues I’ve ever experienced with a laptop. My 2019 XPS 15 went through eight at-home repair visits after hardware failures within four months. Can honestly say I’ve never used a less reliable machine- and every unit I’ve ever touched has had some of the worst coil wine issues I’ve e…

My sown owns XPS 15 (2019) and had just one issue (no hibernation on "lid close" event), which was fixed (although it wasn't simple).

Build quality is amazing, keyboard is great, screen is awesome (4k, hdr, touch).

It has the exact amount of ports my son needs, it can run games and it's weight is good to take it to the school.

Re: Can't you just right click?

#360

Post by olliej »

Abishek_Muthian wrote: post #356
Gorbzel wrote: post #347

Earlier quoted context omitted.

PWAs are terrible, but that debate has nothing on the real gem here: > ...Then why does Apple advertise its products using Google Ads? Congratulations, this cracks top 5 oddest Apple hater argument ever posted in this land of many of 'em.

Hate is a very strong word, something which I wouldn't give a private business luxury of buying from me. If you could give a justifiable answer to what you've quoted from me, I'm all ears.

Google has a functional monopoly on online advertising, so you’re options for online advertising are google and Facebook, or ad companies that primarily have scams. Seriously it’s just google, Facebook, and then things like taboola, and the most popular sites on the web are 100% google ads only.

Apple’s alternative to google ads is essentially no online advertising.

Post reply on HN