People are poor at evaluating risk, especially outside their areas of expertise. Getting software only from reputable sources is an EXCELLENT way to avoid malware. I'm not sure what your comment adds here.
https://www.hackread.com/apple-removes-anti-malware-apps-for...
Personally I have to agree with your thoughts and I stopped torrenting years ago out of fear of a ransomware and only buy legitimate software. Younger me was not able to afford that and my security suffered as a result.
https://en.wikipedia.org/wiki/Mac_Defender
https://www.macstories.net/news/apple-promises-os-x-update-t...
You wish, the Xcode ghost infected apps had 500m installs in total.
They were silently removed.
A malicious developer is unlikely to provide valid credentials.
Thats exactly what code signing is though. A little splish splash of encryption and you're sure that the Dev is part of the Apple Dev program. However trustworthy could mean many things from code thats not buggy to code thats simply not malicious. However code signing absolutely introduces a layer of trust.
Code signing is obviously going to be necessary at all steps, just not via Apple.
(I also note that Teams would only install for all users of the computer, not for the person currently logged in, which I thought was strange, but it's my company's computer, so I don't care that much.)
It's far better than random pirate-ware tho...
I think this is only true if you define "little" as "not a 100% gold-plated, certified FDIC-insured guarantee."
In most contexts, saying something is "little guarantee" means it's worthless. And, as frequently documented on HN and elsewhere, that's simply not true.
Apple has ways of punishing a publisher who is up to no good (and as we've seen, some publishers who aren't), so I can always run and tell mommy.
We didn't have walled gardens and we were fine. We had nasty viruses back then too, even some that would cause physical damage to your hardware.
Where is the personal responsibility to make sure you have backups and not install every crapware found on the web?
Are we going to require warning labels on your computers that can't be removed like airbag labels on cars soon?
I don't want a large corporation deciding what I can install and what not.
Our entire lives are now handled online, which makes cyber crime much more rewarding. Businesses rely much more on the internet. On top of that, cryptocurrency makes it way easier to monetize compromised systems, either via ransomware or via crypto miners. Malware has simply become much more lucrative to criminals.
I was about to say your memory of 20 years ago is very different from mine, until I saw
> We had nasty viruses back then too, even some that would cause physical damage to your hardware.
If that’s your idea of “fine” I’m not sure what to say.
You don't remember the drive-by downloads on windows xp? Or are we only talking about macs?
Just because an application is signed with a developer ID is little guarantee that it’s trustworthy. And stuff from the App Store won’t hold your Mac up for ransom, but fairly concerning software has slipped past review.