News for hackers. Stuff that matters.

A comment on Notarizing Your Mac Software for macOS Catalina. Parent comment

Re:Notarizing Your Mac Software for macOS Catalina by plorkyeran on Monday October 07, 2019 @03:39PM (#21185092)
They sign literally everything. There is no human review process involved in notarization.
[ Parent | on HN ]
Re:Notarizing Your Mac Software for macOS Catalina by e12e on Monday October 07, 2019 @04:59PM (#21185876)
They sign malware?
[ Parent | on HN ]
Re:Notarizing Your Mac Software for macOS Catalina by daxelrod on Monday October 07, 2019 @05:21PM (#21186090)
Pretty sure they do. Part of the point is that they can revoke the signature once it’s found to be malware, and likely the signatures for everything associated with that developer account.
[ Parent | on HN ]
Re:Notarizing Your Mac Software for macOS Catalina by saagarjha on Tuesday October 08, 2019 @12:44AM (#21188844)
They try not to, but it certainly seems like Notarization is more to be able to disable malware after it's detected than preventing it from being signed at all.
[ Parent | on HN ]
Re:Notarizing Your Mac Software for macOS Catalina by ceejayoz on Monday October 07, 2019 @10:19PM (#21188034)
They've probably got enough info from your signup for the developer program to send the FBI to your door afterwards.
[ Parent | on HN ]