News for hackers. Stuff that matters.
Re:Tell HN: Cisco WebEx on OS X uses the same pre-installer ... by occamrazor on Thursday April 09, 2020 @04:10AM (#22820676)
It isn’t a _security_ issue, because the script doesn’t circumvent any security restrictions, but it is a _trust_ issue, because the script abuses pre-install functionality to install the program without explicit user agreement: A Mac user expects a confirmation prompt, but never receives one.
Re:Tell HN: Cisco WebEx on OS X uses the same pre-installer ... by damnyou on Thursday April 09, 2020 @11:27AM (#22823452)
Can you point to data which shows that Mac users expect confirmation prompts? Because my thoughts are that no, Mac users don't have any expectations from installers other than to get out of the way as quickly as possible (which the script approach achieves).