41–50 of 91 posts
This isn't "sensible hacker defaults", it's more like "some guy's view of what Mac OS X should be like".
Unilaterally resetting the scroll direction to the 10.6 standard is insanely presumptuous.
defaults write com.apple.LaunchServices LSQuarantine -bool false This is a terrible idea. If your browser, or anything else, is ever conned into downloading and opening a file, the quarantine is the difference between "what the fuck, why is an executable I've never launched before trying to launch?" and silently getting owned.
Sorry - this is total security theater. I download almost everything from the net - how else would I install? CD? Floppy? Telling me that it's downloaded from the internet doesn't do anything to identify that it's dangerous and so I ignore the warning. Under what circumstance would I go "whoa, maybe it's dangerous this time"??? Mac's don't have auto-install .exe files. Yet we get warning for everything from JPEGs to…
If there's a vulnerability in the application used to open a JPEG or whatever, you can execute code.
It's less asking "is this dangerous?" and more "did you download and open this?"
defaults write com.apple.LaunchServices LSQuarantine -bool false This is a terrible idea. If your browser, or anything else, is ever conned into downloading and opening a file, the quarantine is the difference between "what the fuck, why is an executable I've never launched before trying to launch?" and silently getting owned.
Sorry - this is total security theater. I download almost everything from the net - how else would I install? CD? Floppy? Telling me that it's downloaded from the internet doesn't do anything to identify that it's dangerous and so I ignore the warning. Under what circumstance would I go "whoa, maybe it's dangerous this time"??? Mac's don't have auto-install .exe files. Yet we get warning for everything from JPEGs to…
I don't know why it cares about the executable bit(?) in this case, though.
Earlier quoted context omitted.
Sorry - this is total security theater. I download almost everything from the net - how else would I install? CD? Floppy? Telling me that it's downloaded from the internet doesn't do anything to identify that it's dangerous and so I ignore the warning. Under what circumstance would I go "whoa, maybe it's dangerous this time"??? Mac's don't have auto-install .exe files. Yet we get warning for everything from JPEGs to…
If you can execute code, said code could be an auto-installer. If there's a vulnerability in the application used to open a JPEG or whatever, you can execute code. It's less asking "is this dangerous?" and more "did you download and open this?"
Earlier quoted context omitted.
If you can execute code, said code could be an auto-installer. If there's a vulnerability in the application used to open a JPEG or whatever, you can execute code. It's less asking "is this dangerous?" and more "did you download and open this?"
If something else downloaded and opened the file, it's already owned your account, hasn't it? The horses are out of the barn at that point, right?
1. Download the file. Any website can do this by design.
2. Get LaunchServices to open the file. This requires at least one vulnerability.
3. Bypass quarantine. This requires at least one additional vulnerability.
Does anyone know how to alter / remove the animation from horizontal motion between spaces? Particularly when using the keyboard shortcuts, this whizzing is disorienting and irritating.
I assume it is not possible, given that animation seems to be keenly bound to the trackpad 'peeking' operation and all.
As with any dotfile repo, I wouldn't recommend installing the entire thing at once. Instead, try and take the time to read through it and select settings that you want piecemeal. You'll end up knowing what everything does, especially in the case that something strange happens and you want to tweak things. Edit: I should note that I learned this the hard way starting out, I went backwards by ripping out things that di…
TL;DR This repository is meant to be forked, not used as-is.
Earlier quoted context omitted.
That's not buggy, that's a text file with it's executable bit set, which is actually potentially dangerous.
Under what scenario is it ever unsafe to open a text document in TextEdit? Under what scenario would you ever not completely ignore that warning? A much more likely threat is a malformed jpg or pdf designed to exploit a decoder, in which case the executable bit is completely irrelevant. Warning the user about the executable bit protects them from nothing, unless Finder is preparing to execute the file itself. It is a…
Its 'guess the character encoding' code also might have a 'wait a minute, this is RTF/PDF' feature.
Of course, Apple could trust its own apps, but I think they should not (why increase the attack surface?) and that would lead to complaints "why can't I tell this OS that my text editor can be trusted?".
I also think (but have no data on it) that this "open a .txt file you downloaded" check is very rare for 'normal' users. If they download at all, it is Word documents, PDFs, movies, and applications.
This isn't "sensible hacker defaults", it's more like "some guy's view of what Mac OS X should be like".
Unilaterally resetting the scroll direction to the 10.6 standard is insanely presumptuous.