News for hackers. Stuff that matters.

A comment on Sandboxed Mac apps can record screen any time without you knowing. Parent comment

Re:Sandboxed Mac apps can record screen any time without you... by galad87 on Sunday February 11, 2018 @06:44AM (#16352290)
The only thing required to get a Developer ID signing certificate is a valid credit card (and I guess is not so hard o stole one) Tranmission malware was signed, Eltima Player malware was signed.

I agree with the need of a better first launch dialog.

[ Parent | on HN ]
Re:Sandboxed Mac apps can record screen any time without you... by blub on Sunday February 11, 2018 @09:49AM (#16352858)
Yes, many developers sign, and then fail to offer a secure way of verifying that the signature belongs to them.

But it's still better than nothing, I'm sure they would offer unsigned HTTP downloads if Apple didn't force them to get their shit together.

[ Parent | on HN ]
Re:Sandboxed Mac apps can record screen any time without you... by gurkendoktor on Sunday February 11, 2018 @11:24AM (#16353293)
If the burden for authentication is on the developers anyway, then code-signing shouldn't require a 99€/year subscription. 99€ is a sum that doesn't help Apple, doesn't hinder criminals, but causes headaches for open-source projects and casual developers.
[ Parent | on HN ]
Re:Sandboxed Mac apps can record screen any time without you... by blub on Monday February 12, 2018 @04:00AM (#16357439)
Yeah, Apple could do a better job authenticating public companies, by publishing the company name, address, etc associated with a certificate.

This would solve most of my complaints.

[ Parent | on HN ]