Live data from Hacker News

The Gates to Hell: Apple’s Notarizing

cdfinder.de

71–80 of 214 posts

Re: The Gates to Hell: Apple’s Notarizing

#71
From personal experience, notarization hasn't really caused any friction in my dev process for Mimestream. The upload + server response usually only takes about a minute. Yeah, it's another thing to learn, but the process is pretty well-integrated into Xcode, and if you're building via script then it seems well-supported?

On the other hand, code signing is perennially confusing, and I wish the documentation was better.

Re: The Gates to Hell: Apple’s Notarizing

#72
post #53
post #38

Earlier quoted context omitted.

No, if your subscription lapses previously released software won't stop working. If you are offering free software you can sign with an ad-hoc certificate, and instruct the user on how to bypass gatekeeper, which isn't great at all but it doesn't cost any $$.

Happy Friday everyone. Day ending in 'y', so it's time for that never ending HN Apple haters groupthink exercise: 1. Linux desktop advocate describes a supposed technical implementation from Apple that seems extremely walled garden and onerous if accurate. 2. Outrage ensues. 3. It's never true.

This puts it well, albeit with (enjoyable) snark.

So often these criticisms read like it’s expected that Apple conform to the Linux “model” of doing things, and anything else is like the plague.

Re: The Gates to Hell: Apple’s Notarizing

#73
post #25

Earlier quoted context omitted.

This comment could have been written a decade ago and it was as laughable back then as it is today. Developers do not dictate the success of a platform. Users do. And they don’t want Linux on the desktop.

Why do users choose a platform? Apps. Who makes the apps? Developers embraced Windows over Mac, users followed. (Until iOS development made Mac's the default dev machine.) Developers embraced iOS and Android over Symbian and webOS. Windows and Mac were great development platforms ten years ago, and iOS and Android were way better than the now-dead competition.

When your entire desktop is mostly Electron, no, apps don’t dictate what people buy. You can run the same stuff on almost any OS now.

People buy Apple because the hardware is great, the software is more integrated than Linux and Windows due to that tight hardware control, and the Apple Store model which “just works” for the average person.

Re: The Gates to Hell: Apple’s Notarizing

#74
post #58

Earlier quoted context omitted.

There are practically no stores which sell hardware with Linux.

That doesn't prevent it from becoming so mainstream at work that even one salesman(!) at work used it. Yes you have to jump through hoops and not everyone in IT is extremely happy always but even some of them prefer it. To me it feels kind of like when Mac broke through in developer circles. First it was weird and IT department laughed. Then more and more people including bosses demanded it and here we are: if a job…

> That doesn't prevent it from becoming so mainstream at work

I would say that it does. If your boss is not aware of this system, they will not allow to use it or consider secure. At work, I am typically not allowed to freely choose my OS.

Re: The Gates to Hell: Apple’s Notarizing

#75
post #49

Earlier quoted context omitted.

With due respect, that's a rather elitist and miopic view that considers mac usage within bubbles only, albeit popular in HN. Specially considering that surveys report macs being used only by a third of the developers that answered it. That's a farcry from "most". See StackOverflow survey.

I didn't say "most", and even the framing I used of "default machine" came from the comment I was responding to: > Until iOS development made Mac's the default dev machine. I was just pointing out that based on my personal experience, it started earlier than that. I don't know what to say about the elitist comment. I'm only pointing out my anecdotal experience. I'm well aware of Stackoverflow's developer statistics,…

It depends on what you work on. Of course if you work with iOS development your surroundings will be mostly macOS machines since it's a hard requirement, no surprises here hence my comment about bubbles. Otherwise statistically speaking, macs are not the default developer machine as per surveys.

It also depends on who you admire. For example Linus, someone I admire, uses a AMD Threadripper 3970x. And the best engineer I personally know, uses a Thinkpad with Debian.

On my team, currently responsible for heavy backend engineering, we have been replacing macs with Dell XPS + Linux due to mac's horrible support for Docker which is a hard requirement for us.

Re: The Gates to Hell: Apple’s Notarizing

#76

Ha! Even though Notarizing was released in 2018, it's still too soon to discuss for me.... Try packaging a python interpreter with a ton of .so's and .dylibs with your .app and see how much hair you have left!

I’ve packaged and signed/notarized a Dolphin (fork) build and it was relatively painless all things considered. Dylibs have no real impact on this process so I’m curious what you ran into.

Re: The Gates to Hell: Apple’s Notarizing

#77
post #9
post #3

If you're going to rant about details, it helps to actually get the details right. For example, showing a screenshot that doesn't contain the word "malware" and then saying: > Using my application name and the word "malware" in one sentence is suggestive and extremely offensive by Apple. Does not fill me with much hope that the author is detail-oriented. I'll keep reading, and I know already that the notarizing proce…

It’s a fair point, though the dialog I usually see says “macOS cannot verify that this app is free of malware”. Presumably that’s because Apple scans the uploaded executable for malware during notorization.

Unless your dialog box is quite different from the one in the article, it says that the app "can't be opened because Apple cannot check it for malicious software."

Which means the same thing, and if there weren't quotes around the words, a paraphrase is fine. But if you put quotes around a word or phrase, then it should be accurate, or I will start to wonder if your attention to detail is adequate to things like, um, notarizing software.

Re: The Gates to Hell: Apple’s Notarizing

#78
post #34
post #25

Earlier quoted context omitted.

Why do users choose a platform? Apps. Who makes the apps? Developers embraced Windows over Mac, users followed. (Until iOS development made Mac's the default dev machine.) Developers embraced iOS and Android over Symbian and webOS. Windows and Mac were great development platforms ten years ago, and iOS and Android were way better than the now-dead competition.

> Why do users choose a platform? Apps. They also choose brands. Apple has one of the biggest ones, and the fact that people bought MacBooks during the butterfly keyboard years should tell you just how powerful that brand is.

Yeah, grandparents and computer labs kept their old Apple computers around through the '90s when Apple wasn't cool. Before getting a Mac became at first ironically cool in the early '00s (because they looked funny but couldn't run any good games). Apple is clearly just a default and not a preference with kids nowadays in my experience, like they were for kids in schools in the '90s. They have good games now though.

Brands don't seem particularly defensible, and Apple doesn't seem to have any network effects outside iMessages/FaceTime and their accessory ecosystem.

James Currier on brands: "I don't think brand is a worthy defense at all. I've seen companies with phenomenal brands get crushed in a matter of years. If you go back to the early age of PC software, the best brands in the industry were Lotus 1-2-3 and WordPerfect. Microsoft crushed them in a matter of years, and they had the brands. I don't think brand buys you very much. The best brand in search was AltaVista or maybe Yahoo! and now they're roadkill."

https://www.nfx.com/post/the-four-types-of-defensibility/

Re: The Gates to Hell: Apple’s Notarizing

#79
post #69

Earlier quoted context omitted.

Honestly I never have seen such piece of crap like "Notarization". One of the Apple's failures ever (if is not the most one). A nightmare (and not cheap) to deal with it as a developer.

$100/yr is fairly cheap all things considered, and it takes thirty minutes Max to set up a bash script to handle it. And that’s just non-Xcode. If you use Xcode it’s often automatic.

> If you use Xcode it’s often automatic.

You can't have read the same article I just read!

Re: The Gates to Hell: Apple’s Notarizing

#80
post #46

Earlier quoted context omitted.

For me, yes - it did undermine the case that the author was making. It was sloppy. If he got this one simple thing wrong, can I trust his other complaints?

FWIW, the author seems to be German speaking and in the German version of macOS, Apple actually uses "malware" in their notarization popup instead of the German equivalent of "malicious software" (de: bösartige software). I think it's very possible that the author changed his os language to take the screenshots suitable for an international audience and did not immediately notice the slight difference in wording.

I had not considered this possibility! Thanks for the call-out. The author's English is excellent, and I hadn't realized until I saw your comment that NeoFinder is indeed from a German site.

https://www.cdfinder.de/en/downloads.html

Post reply on HN