News for hackers. Stuff that matters.

A comment on Sandboxed Mac apps can record screen any time without you knowing. Parent comment

Re:Sandboxed Mac apps can record screen any time without you... by gurkendoktor on Sunday February 11, 2018 @04:11AM (#16351890)
I'm a big fan of desktop sandboxing, so thanks for the hard work. I dreaded running the unsandboxed Office:mac 2011 with its constant stream of "critical" security updates. That was definitely my worst experience using native apps.

On the other hand, I am not sure that code signing has been an all-around success. It seems to make life harder for the long tail of one-off apps and open source ports. And bad actors are only blacklisted after they've been caught. https://panic.com/blog/stolen-source-code/ - related: https://github.com/HandBrake/HandBrake/issues/619

I think I would prefer a security model were you could just download and start any .app, but upon first opening it, a dialog would inform you about its code-signing author and the permissions that the app has (with striking red/green color coding). Because right now, there is no way to tell which apps even use sandboxing without opening Activity Monitor, and there is no incentive for non-App-Store-apps to use sandboxing. (There is a dialog when opening a downloaded app for the first time, but it's grey and boring and not helpful at all.)

[ Parent | on HN ]
Re:Sandboxed Mac apps can record screen any time without you... by galad87 on Sunday February 11, 2018 @06:44AM (#16352290)
The only thing required to get a Developer ID signing certificate is a valid credit card (and I guess is not so hard o stole one) Tranmission malware was signed, Eltima Player malware was signed.

I agree with the need of a better first launch dialog.

[ Parent | on HN ]
Re:Sandboxed Mac apps can record screen any time without you... by blub on Sunday February 11, 2018 @09:49AM (#16352858)
Yes, many developers sign, and then fail to offer a secure way of verifying that the signature belongs to them.

But it's still better than nothing, I'm sure they would offer unsigned HTTP downloads if Apple didn't force them to get their shit together.

[ Parent | on HN ]
Re:Sandboxed Mac apps can record screen any time without you... by gurkendoktor on Sunday February 11, 2018 @11:24AM (#16353293)
If the burden for authentication is on the developers anyway, then code-signing shouldn't require a 99€/year subscription. 99€ is a sum that doesn't help Apple, doesn't hinder criminals, but causes headaches for open-source projects and casual developers.
[ Parent | on HN ]
Re:Sandboxed Mac apps can record screen any time without you... by blub on Monday February 12, 2018 @04:00AM (#16357439)
Yeah, Apple could do a better job authenticating public companies, by publishing the company name, address, etc associated with a certificate.

This would solve most of my complaints.

[ Parent | on HN ]