News for hackers. Stuff that matters.

A comment on Apple blocks all unsigned binaries on new Macs.

Re:Apple blocks all unsigned binaries on new Macs by coldtea on Wednesday November 18, 2020 @03:49AM (#25134506)
It's about unsigned (not notarized) binaries. Not about using only apps from the app store.

You can use homebrew, third party apps from the web, apps you've built yourself, etc, just fine. They just need a signature.

Kind of like Chrome, Safari, FF, blocking non https websites (with Apple being the CA tho).

This has been announced years ago, and was extended last year, and is now enforced.

[ Parent | on HN ]
Re:Apple blocks all unsigned binaries on new Macs by deanishe on Wednesday November 18, 2020 @05:15AM (#25135105)
> They just need a signature.

And you need to pay Apple for the certificate to sign them. And never piss them off lest they revoke it.

[ Parent | on HN ]
Re:Apple blocks all unsigned binaries on new Macs by vr46 on Wednesday November 18, 2020 @06:19AM (#25135522)
That isn't true. You can use ad-hoc signatures generated during the build. The point is to detect tampering and damage.
[ Parent | on HN ]
Re:Apple blocks all unsigned binaries on new Macs by onion2k on Wednesday November 18, 2020 @06:48AM (#25135750)
ad-hoc signed apps expire after a week, then you need to rebuild. It's not a viable solution for distributing apps. If you want other people to use something you wrote you have to pay Apple.
[ Parent | on HN ]
Re:Apple blocks all unsigned binaries on new Macs by chrisfinazzo on Wednesday November 18, 2020 @09:34PM (#25145588)
Reminds me of the session at WWDC 2012 where Peter Kiehtreiber (aka Perry the Cynic) introduced Gatekeeper and Developer ID.

Even back then, Apple was not kidding about forcing as much code as possible through some identity system before it could run.

To quote the distinguished gentleman, with a touch of sarcasm:

"If you're currently shipping unsigned code, what the hell is wrong with you!?"

[ Parent | on HN ]
Re:Apple blocks all unsigned binaries on new Macs by neximo64 on Wednesday November 18, 2020 @04:29PM (#25142679)
It was announced and there has always been a way to disable it. There is also a way to disable it on the intel macs.

And no it has not been announced before that you will be forced into notarization.

[ Parent | on HN ]
Re:Apple blocks all unsigned binaries on new Macs by therealmarv on Wednesday November 18, 2020 @03:59AM (#25134586)
Was homebrew binaries signed before?
[ Parent | on HN ]