News for hackers. Stuff that matters.

A comment on macOS gatekeeper and file quarantine bypass. Parent comment

Re:macOS gatekeeper and file quarantine bypass by kstrauser on Monday April 26, 2021 @03:43PM (#26947081)
You're hugely misreading my intentions. I'm an engineer: I see something unexpected, I want to figure out what's happening. You and I are both using the same software and you're seeing problems that I didn't even know affected some people. I'm not saying "this works for me so I don't know what you're complaining about". I'm saying "huh, this works for me. I wonder what's different between our systems? Is this something that's going to spontaneously start affecting me if I click the wrong toggle somewhere?"

Obviously the problem is possible. It's happening to you. I'd like to find out why so that I can troubleshoot and fix the problem if it starts happening to me or my friends or coworkers. And really, I'd like to help you fix it, too, if I could figure out what's causing it.

[ Parent | on HN ]
Re:macOS gatekeeper and file quarantine bypass by Isthatablackgsd on Monday April 26, 2021 @04:15PM (#26947488)
Apologies for misreading you, I'm just frustrated and accepted the fact that it is by design.

I been reading other comments and as someone (xrisk) pointed out that it is Homebrew Casks which it made sense since all of the gatekeeper alerts is coming from 'Cask-ed' apps. I could disable Gatekeeper but I rather not because MacOS is not my daily driver. I rather to keep Gatekeeper active to protect itself from moronic me.

[ Parent | on HN ]
Re:macOS gatekeeper and file quarantine bypass by btilly on Monday April 26, 2021 @06:54PM (#26949356)
Given how ubiquitous your problem is, I would be suspicious that security alerts are going off because you have a real security problem. I've seen similar problems when a piece of malware keeps trying to inject itself into various things, and Gatekeeper is catching it. The variety of places where you're getting alerts is a testament to the persistence of the malware, and not the fact that everything is actually broken.
[ Parent | on HN ]
Re:macOS gatekeeper and file quarantine bypass by kstrauser on Monday April 26, 2021 @04:42PM (#26947834)
That's OK. If I were in your boat, I'd probably be pretty frustrated.

Does the method of right-clicking on an app, then "Open", in Finder work to tell Gatekeeper to quit complaining?

[ Parent | on HN ]
Re:macOS gatekeeper and file quarantine bypass by setr on Monday April 26, 2021 @04:25PM (#26947607)
Probably the simplest thing then would be to alias brew install to something like spctl —master-disable; brew install $1; spctl —master-enable
[ Parent | on HN ]
Re:macOS gatekeeper and file quarantine bypass by Wowfunhappy on Monday April 26, 2021 @06:46PM (#26949279)
`spctl --master-disable` requires root permissions (sudo).

You could edit sudoers so the command doesn't require a password. But really, at that point I'd just leave Gatekeeper off.

[ Parent | on HN ]
Re:macOS gatekeeper and file quarantine bypass by vlovich123 on Tuesday April 27, 2021 @01:30PM (#26958949)
Is it possible you do this on a corp machine that has Google's Santa running & it's just a language precision issue? Google Santa will definitely prompt on nearly everything & is extremely annoying for Homebrew. Google Santa != Gatekeeper though.
[ Parent | on HN ]