Live data from Hacker News

Between a rock and a hard place – our decision to abandon the Mac App Store

blogs.atlassian.com

71–80 of 157 posts

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#71
post #32
post #8

Earlier quoted context omitted.

Next thing you know, there will be no keyboard, just a featureless ball. It would roll down from slippery slopes real well.

Hopefully it'll eventually become a computer with no screen or keyboard, just a big red button which turns the thing off. I'd buy that.

And version two would remove the button. Why would you want to turn it off?

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#72
post #67

Earlier quoted context omitted.

> By the letter of the law, Mac App Store apps are to be sandboxed, which means no /Library access, which means no plug-ins. I don't understand: What prevents an app from having an "Add Plugin..." dialog that uses the sandboxed file browser to locate a plugin library in whatever sensible format?

I was under the impression that dynamically loading code was no longer allowed. Not that apps have to be static, but unless it was part of the .app and signed it won't run in the sandbox.

Can anyone confirm/deny this?

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#73
One thing to be wary of: abandoning the Mac App Store is going to make life much harder for you and your users in the near future. As of OS X 10.8, by default applications cannot be installed outside of the App Store (though a setting exists to change this):

http://techcrunch.com/2012/02/16/os-x-mountain-lion/ (scroll down to Gatekeeper)

Here's hoping that 10.9 doesn't disallow such installations at all (or void your warranty instead?).

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#74
post #57
post #13

Earlier quoted context omitted.

Good point. Every interpreter - and program that loads anything - will have to be foolproof. There was a case some time ago where an Xbox (or was it ps3?) game did not correctly check the saved games before loading them. IIRC people where able to exploit this and get the game to run code on their behalf. In theory, all the games and apps have to sign/encrypt/check everything they load. But I can't believe they will a…

That was the first way Wii owners got homebrew software running: the Wii version of Zelda: Twilight Princess didn't do a bounds check when reading the name of the player's horse from a save file. http://wiibrew.org/wiki/Twilight_Hack#Explanation

the real way we got homebrew in the wii in the first place was because of a awful RSA implementation done by outsourced devs in the USA.

http://events.ccc.de/congress/2008/Fahrplan/events/2799.en.h...

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#75
post #73

One thing to be wary of: abandoning the Mac App Store is going to make life much harder for you and your users in the near future. As of OS X 10.8, by default applications cannot be installed outside of the App Store (though a setting exists to change this): http://techcrunch.com/2012/02/16/os-x-mountain-lion/ (scroll down to Gatekeeper) Here's hoping that 10.9 doesn't disallow such installations at all (or void your…

That's not quite true - as shown in your link, gatekeeper's default (at least for now :) is to allow App Store as well as Signed Applications. If a developer is willing to get their application signed, then end users will still be able to install the application outside of the app store.

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#76
post #40

Earlier quoted context omitted.

> For the duration of the company's existence, one of their biggest customer segments has been the creative industry I would have thought the Final Cut Pro X debacle ( http://pogue.blogs.nytimes.com/2011/06/23/professional-video... ) would have served adequate notice to those folks that Apple doesn't consider them an important market segment anymore...

Maybe. I hope not. All the filmmakers/editors I know still use a previous version of Final Cut, many of them really like some of the features of Final Cut X (syncing is apparently dead easy, nearly automagic), and remain hopeful that Apple will pull it together and address their needs in future updates. I don't know if you have used/use Final Cut 6/7, but it is a phenomenally ugly, often poor performing, generally un…

FYI, the latest update to Final Cut Pro X was a major update, adding impressive multicam support which uses "audio waveforms from the different cameras to sync them together. The audio doesn't have to be the final production track and can be used for syncing purposes only,"[1] chroma keying, media relinking, import of photoshop layered graphics, support for XML 1.1, and beta broadcast support. This new update has an average review score of 4.5 stars Mac App Store.[2] While Final Cut Pro X started out weak, it looks like it's becoming very solid.

[1] http://www.tuaw.com/2012/01/31/apple-updates-final-cut-pro-x... [2] http://itunes.apple.com/us/app/final-cut-pro/id424389933?mt=...

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#77
post #73

One thing to be wary of: abandoning the Mac App Store is going to make life much harder for you and your users in the near future. As of OS X 10.8, by default applications cannot be installed outside of the App Store (though a setting exists to change this): http://techcrunch.com/2012/02/16/os-x-mountain-lion/ (scroll down to Gatekeeper) Here's hoping that 10.9 doesn't disallow such installations at all (or void your…

Actually that's incorrect. You can't install completely unsigned applications from the web in 10.8 without changing a setting, but the default isn't the "Only MAS" option, it's the "MAS + identified developers" option.

So while you can abandon the App Store without penalty, you shouldn't stop paying Apple the $99 a year you need to do so to get the app signed, even if you aren't going to sandbox it or distribute it through the MAS. They just want the option of pulling a cert for a dev found to be distributing malware, not to personally review and reject every application that runs in OS X.

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#78
post #4

Earlier quoted context omitted.

They're trying to take take take everything away from the user. Soon there will be no filesystem.

Yes, and never mind that just about everything you take for granted about personal computers was "given" by Apple, too. I find this notion that users are entitled to complete device freedom really annoying. If you find it so objectionable, go build your own hardware and OS platform. This isn't a matter of human rights because no one is telling you that you can't make your own.

... you really object to users stating what they want to have?

So... Apple generally gets kudos for 'giving users what they want', but users are not allowed to say what they want?

Nice work.

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#79
post #62

Earlier quoted context omitted.

Once you are dealing with more than, say, two hundred pieces of information, you kind of start needing to classify that information and have definite ways to find it. If tags are a way that you can definitely find and specify a given file, then tags will form part of a new, distributed file system. If tags wind-up just being half-assed, uncertain hints to where files might be, then they will form part of a new, disfu…

I think you missed my point. I have thousands of photos "in" iPhoto, and I have no idea of any of the file names or their location on the file system. I don't care what they are called or where they are, I just want to have my photos. Sure, there might be a filesystem under there, but I have no interest in interacting with it directly.

So... what about my scripts? Should I have to load some specific manager - iScript - in order to access my creations? Just because 'the filesystem is dying'? What about my store of .iso files? Do I need iIso?

Re: Between a rock and a hard place – our decision to abandon the Mac App Store

#80

I like the idea of a sandbox. Apple promotes the sandbox as a security feature but shouldn't Apple try to improve much more important things (security wise) first which are much less invasive? Example: The Keychain application from Apple (used to store certificates, private keys and passwords) is using a encryption algorithm that is too weak for what it is used - namely: DES. You can break it with a reasonable amount…

I could not believe they would use single DES (I would have expected AES), so I googled around. Apparently (http://stackoverflow.com/questions/6312871/what-encryption-a...; it is (or at some time was) 3DES; the PDF linked from there states:

   "All the password data in the keychain is protected using the
    Triple Digital Encryption Standard (3DES)."
http://en.wikipedia.org/wiki/Triple_DES#Security states:

   "NIST considers keying option 1 to be appropriate through 2030."
I am still surprised that it is not AES, but 3DES seems good enough. Also, I am not sure that PDF still describes the current situation.
Post reply on HN