News for hackers. Stuff that matters.

A comment on /story/34802730. Parent comment

Re: by KerrAvon on Wednesday February 15, 2023 @11:55AM (#34806756)
This is slippery-slope fearmongering. In reality, Apple has gone out of its way to ensure that Apple Silicon Macs can boot other operating systems if the user so desires, and can do so without sacrificing security.
[ Parent | on HN ]
Re: by orangecat on Wednesday February 15, 2023 @12:11PM (#34807059)
This is slippery-slope fearmongering

Apple has publicly said that macOS is unacceptably insecure because users have the option of running unapproved software (https://www.theverge.com/2021/5/19/22444353/mac-malware-not-...). It's not unreasonable to think that they'd be interested in fixing that "problem".

[ Parent | on HN ]
Re: by rnk on Wednesday February 15, 2023 @04:24PM (#34810785)
Yeah if apple was all about open they would publish specs so people working on build up the m1 Linus wouldn't have to reverse engineer so much. I guess what they do is let you boit other os'.
[ Parent | on HN ]
Re: by flohofwoe on Wednesday February 15, 2023 @12:01PM (#34806883)
I actually mean all the little Vista-style popups that recent macOS versions introduced, on top of the quarantine and notarization bullshit which gets harder to skip in each release.

Just give me a simple checkbox in the system settings that this is a "developer machine and I know what I'm doing" which disables all that stuff and it would be fine.

[ Parent | on HN ]
Re: by anigbrowl on Wednesday February 15, 2023 @12:40PM (#34807526)
* * *
[ Parent | on HN ]
Re: by officeplant on Wednesday February 15, 2023 @01:42PM (#34808588)
I gotta say, I moved from MacOS to GhostBSD recently and it was far easier than I expected. Even if the main reason my spare computer works well with BSD is the fact that its generic 10 year old Dell business hardware.

I assumed it would be much more frustrating than going back to Linux. Instead I've found fairly sensible documentation for solving nearly every issue I've run into, and a well stocked repo of applications.

[ Parent | on HN ]
Re: by scosman on Wednesday February 15, 2023 @12:09PM (#34807012)
Malware teams would loooooove that checkbox.
[ Parent | on HN ]
Re: by jermaustin1 on Wednesday February 15, 2023 @01:35PM (#34808466)
Yes they would, and so would I... a developer who likes running unsigned executables and doesn't like having to jump through hoops to enable them... each time I download a new one.
[ Parent | on HN ]
Re: by scosman on Thursday February 16, 2023 @11:07AM (#34820486)
Yup. And apple is trying to make an OS safe for typical consumers who make mistakes and can be tricked. Hoops for you are a necessary burden to protect them. If you hate them, lots of Linux distros meet your desires. I personally think they are right to not trade off the security of the majority for the convenience of the minority.
[ Parent | on HN ]
Re: by alwaysbeconsing on Wednesday February 15, 2023 @07:59PM (#34813455)
Well, they can't make it a simple checkbox or everyone would just check it (see how many people already download Developer Betas of the OSes every summer). But if you really do want this, you can have it: disable SIP, done.
[ Parent | on HN ]
Re: by flohofwoe on Thursday February 16, 2023 @07:57AM (#34818077)
The problem with disabling SIP is that (AFAIK) it also does a lot of useful/important things (for instance protecting the system folders).

Simply disabling it globally isn't really a good solution to the problem. Neither signed nor unsigned, notarized or un-notarized apps should ever be allowed to write to those folders, no matter if SIP is on or off.

OTH preventing an app to read/write subdirectories in the user's home folder is definitely not a useful feature.

[ Parent | on HN ]
Re: by TazeTSchnitzel on Wednesday February 15, 2023 @11:59AM (#34806848)
They also go out of their way to make it annoying to use applications that aren't signed by Apple under the $99/year developer plan.
[ Parent | on HN ]
Re: by sokoloff on Wednesday February 15, 2023 @12:18PM (#34807192)
Right-click open, click open one time ever is well below my personal threshold for annoying.
[ Parent | on HN ]
Re: by fragmede on Wednesday February 15, 2023 @02:41PM (#34809467)
* * *
[ Parent | on HN ]
Re: by sbuk on Wednesday February 15, 2023 @02:57PM (#34809726)
The OP literally described the process for opening unsigned apps.
[ Parent | on HN ]
Re: by TazeTSchnitzel on Wednesday February 15, 2023 @03:24PM (#34810046)
Didn't it change with Apple Silicon? That requires everything to be signed, albeit not necessarily by Apple.
[ Parent | on HN ]
Re: by burnte on Wednesday February 15, 2023 @05:29PM (#34811723)
How do you right-click on an iPhone or iPad? That's what his comment is about.
[ Parent | on HN ]
Re: by TazeTSchnitzel on Friday February 17, 2023 @03:59AM (#34832455)
It wasn't and I'm not a guy.
[ Parent | on HN ]
Re: by burnte on Sunday February 19, 2023 @05:14PM (#34862396)
It had to be because you can still develop for MacOS without the $99/yr fee. I think you also knew that no offense was intended because "him" is both masculine and for quite a while the gender-indeterminate-default, and it takes time to change habits. In case you feel otherwise, I wasn't intending to mislabel you, I was focused on the subject more than the genders of those I was talking with and will try to remember for the future.
[ Parent | on HN ]
Re: by actionfromafar on Wednesday February 15, 2023 @12:11PM (#34807053)
I wonder why they do this. But regardless, it's much more interesting how open MacOS is than that some tiny fraction of a fraction of Mac owners may run Linux on their Macs.
[ Parent | on HN ]
Re: by adql on Wednesday February 15, 2023 @12:24PM (#34807295)
How they have "gone out of their way" ?
[ Parent | on HN ]
Re: by BanazirGalbasi on Wednesday February 15, 2023 @01:34PM (#34808443)
I can't find it anymore, but one of the more recent updates on Asahi Linux pointed out that there were certain bootloader features that were more complicated to include than to leave out. They were unnecessary for macOS to boot, but they allowed for other OSes to run more easily. Basically Apple had to put in more effort in order to allow Linux to boot.
[ Parent | on HN ]
Re: by behnamoh on Wednesday February 15, 2023 @01:10PM (#34808050)
It is NOT. Apple literally doesn't allow you to modify the root directory anymore. If you want to, you have to jump through some loops and lose access to FileVault!
[ Parent | on HN ]
Re: by yamtaddle on Wednesday February 15, 2023 @02:06PM (#34808921)
People've been saying this crap since I started using Macs over a decade ago. They're always sure Apple's on the brink of locking MacOS down into an appliance OS.

They still haven't, haven't even made any big moves that way, but maybe eventually that crowd will be right in the same way that if you predict a recession every year, you'll eventually be right.

[ Parent | on HN ]
Re: by fragmede on Wednesday February 15, 2023 @02:39PM (#34809446)
* * *
[ Parent | on HN ]
Re: by yamtaddle on Wednesday February 15, 2023 @02:46PM (#34809554)
Why? Like similar things they've done, you can disable it. It's in the official docs, even.
[ Parent | on HN ]