5 ms·
from the article, "In its default configuration, Gatekeeper allows signed applications. The malware used by the WINDSHIFT APT group was signed (as is most Mac m
by s-y-n-syn-a-c-k 8y ago
from the article, "In its default configuration, Gatekeeper allows signed applications. The malware used by the WINDSHIFT APT group was signed (as is most Mac malware these days). So Gatekeeper doesn't even come into play!"
So as long as the app is signed, there are no secondary prompts from gatekeeper
- jsjohnst 8y agoSorry to burst your bubble, but all executable downloads get quarantine dialog. If the binary wasn’t signed, then it wouldn’t be a dialog with a “proceed” equivalent option, it would be a full stop (unless you turned off the requirement).
- s-y-n-syn-a-c-k 8y agoThere is no bubble to burst. What you said is untrue in High Sierra and maybe other versions. Go out and download a signed executable. If I download and execute a signed package from the Internet, I receive no warning. If that package installs a URL scheme helper, I always receive "would you like to run xxxxxx" from Safari. The article even says gatekeeper does not come into play with signed apps. So you are refuting the article's accuracy? https://support.apple.com/en-us/HT202491 https://support.apple.com/en-us/HT202491
- jsjohnst 8y agoQuarantine != Gatekeeper. They are two different things, stop conflating them. Even with a signed app, you’ll get the quarantine dialog. See this Apple Support page for confirmation and to see an example: https://support.apple.com/en-us/HT201940 https://support.apple.com/en-us/HT201940