Self-signed applications are treated as if they're radioactive by macOS, too.
> This really isn't a big deal.
They've been turning the screws slowly over the last two years. It only takes another turn for them to switch off support for self-signed apps for security reasons. Browsers already do this for self-signed certificates.
It's just not something I'm willing to base my purchasing decisions on, nor the decisions about what desktop platforms I target with my applications.
But not if you turn off Gatekeeper! I can understand how this is annoying if you're creating apps for other people, but in terms of my own personal experience with my computer, the only time I think about Gatekeeper is when I'm talking about it on HN. It gets turned off as part of a bash script I run after installing macOS, at which point it's gone for good.
On my list of annoyances with macOS, Gatekeeper is somewhere below the Library folder being hidden by default. I can't say what Apple will decide to do in the future, but I have a very clear line in the sand, and Apple has absolutely not crossed it.
As long as the walled garden can be easily circumvented, advanced users can do what they wish. "Able to learn about Gatekeeper and decide if they should turn it off" is probably an okay heuristic for "can tell a fake Flash installer site apart from a real one" or even "knows that Flash is pretty much abandoned, do everything you can to avoid it".
That said, it absolutely changes the incentive structures, and Apple is also doing it for profit. Will they cross the line in the future, with this goal? I expect they will conclude losing the advanced users would be a net loss.
That's exactly how I see it! And this mentality continues throughout the chain, too—if you want to actually install unsigned kernel extensions, or inject code into other processes, you need to boot into recovery mode to disable SIP. This is still not at all onerous if you know what you're doing (and, like Gatekeeper, you only need to do it once), but it's definitely a next-level test for next-level privileges.
IMO, the way Apple designed this process is brilliant! And that's why I'm not personally concerned by the boiling water argument, at least not yet—whatever Apple's incentives, the current setup strikes me as the best way to handle things.
All of that said, where I am starting to get annoyed is with the root snapshot stuff in Big Sur. Having to reboot every time I want to edit a system file is a clear progression from "trivial speed bump" into "consistent pain-in-the-ass" territory. If you want to talk about Apple locking down the Mac, I'd start there!
If Apple chooses not to issue me a Developer ID, they have effectively removed 95%+ of my market.
If this is because I distributed malware, that's reasonable. But there are a lot of other reasons why Apple might choose to revoke a Developer ID. (Think pressure from the state, for one.)
Most will look at you like you’ve got three heads, and (I suspect) the majority will simply walk away without purchasing.
The premise is that if a frog is put suddenly into boiling water, it will jump out, but if the frog is put in tepid water which is then brought to a boil slowly, it will not perceive the danger and will be cooked to death.
The story is often used as a metaphor for the inability or unwillingness of people to react to or be aware of sinister threats that arise gradually rather than suddenly."
In the case of Apple, at some point when they do something you really dislike you might be too invested into the ecosystem and it will be easier to just accept it instead of leaving.
But if you were not on their ecosystem already and were thinking of switching to Apple you would just think "Yeah, I really dislike that new move, I'm not buying into it".
It's just a metaphor. It's not a law of nature, nor is it even a GOOD metaphor.
https://www.theatlantic.com/technology/archive/2006/09/the-b...
--
The New Psychology (1897): "a live frog can actually be boiled without a movement if the water is heated slowly enough; in one experiment the temperature was raised at a rate of 0.002°C per second, and the frog was found dead at the end of 2½ hours without having moved."
They've been very gradually locking it down for years and show no signs of stopping. Plus they have an obvious financial motivation to lock it down. To give them the benefit of the doubt here is naive to say the least.
What's the security benefit to this?
Imagine the next ones:
1. You have to enable an option in settings to allow running self-signed apps.
2. You have to disable SIP to allow running self-signed apps.
3. Apps can only be self-signed via Apple's website.
etc.
Apple Silicon Macs will not run unsigned binaries, but the binaries can have any signature, so you can just generate one yourself and add it. There's no need for a developer account, or any other external party. And there are no issues with legacy support either, because ARM Mac binaries didn't exist until now (and the requirement does not apply to Intel apps being run via Rosetta).
This really isn't a big deal.
I was initially worried that mandatory code signing would prevent me from hex editing binaries (which is a thing I do sometimes), but I recently learned that codesign can replace a binary's existing signature. So even that shouldn't be a problem.