4 ms·

As far as I can tell, Notarization only impacts apps/executables that have the quarantine bit set in their extended attributes. This bit is typically added by w

As far as I can tell, Notarization only impacts apps/executables that have the quarantine bit set in their extended attributes. This bit is typically added by web browsers and other programs when they download files directly from the internet. Before notarization, when this bit was set, the user would receive a simple warning that the software was downloaded from the internet and they should proceed with caution. All notarization does is add additional logic to this flow. If the notarization is "stapled" to the executable, then macOS can verify it offline, otherwise macOS will connect to Apple's servers to verify the notarization of an app/binary. This means that by notarizing an existing app, you do not need to re-distribute it. This quarantine bit behavior is why upgrading to Catalina does not impact previously installed apps (regardless of their notarization status) as they do not have this bit set.

kjksf 7y ago
Slow boiling frog. Given the history of what Apple did in the past, I think it's very naive that this is the last restriction Apple will add. First the user could run any app. Then you had to sign the app or the user would see a scary warning. Then you had to sign the app or, by default, the user could not open the app, unless he enables it via a UI that is very confusing (and I assume on purpose). Now you have to notorize the app. It's pretty clear that the end goal for Apple is to lock down Mac OS the same way they locked down iOS. Apple needs to protect the hostages, I mean users, from the likes of Mozilla which produces a dangerous app that duplicates built-in OS functionality, which is confusing. And it can deliver porn so think of the children! And they will in Mac OS 10.20, unless the government steps in.
- vunie 7y ago
  >Slow boiling frog. I agree. All this infrastructure and support doesn't make sense if it is only used on executables that have some easily modifiable fs attribute set. I fully expect apple to try to expand this on all executables at some point in the future. It'll be interesting to see if they will be able to pull it off.
- velcrovan 7y ago
  It's worth noting that frogs will in fact jump out of hot water no matter how slowly you bring it to a boil.
w1nst0nsm1th 7y ago
Whait until 10.16 MacOS is out. Then you will not be able anymore to open not notarized app. And for 10.17, Developers will have to pay for notarization, as an "insurance" low quality app will not end on your Macbook. For 10.18 or 10.19, nothing will run unless it's installed from the Apple store or certified with an enterprise certificate delivered by Apple. Just like on iOS. Apple has previously expressed frustration about the poor financial performance of the Mac App Store... They want to bring the iOS App Store business model on Mac in order to optimize financial return on the platform. It's on par with the T2 ship insertion in new models in order to prevent third party repair (google Rossman macbook) just to be able to ask outrageous prices for minor repair or to push for the purchase of a new model at every random glitch on your device outside of the Apple Care contract or legal warranty.. Beside, in Catallina, they just put the /System folder as a separate partition in read only mode... But even if you can still currently mount it in read-write mode, in a future version it will not be possible anymore, unless if you start in recovery mode, system used by Apple to install new version of MacOS. Soon, you will have to jailbreak your Macbook, taking advantage of a providential "bug" on a specific version, and lost all unix permission system benefits in order to install third party software (at that point cracked, because all legit developer will either have already paid for notarization/Mac App Store or abandonned the platform), just like on iOS. It's all writen betweens the lines. They're just going forward slowly enough to avoid brutal outcry from the MacOS power users base and the press.
- pram 7y ago
  Do you honestly believe the T2 serves no useful/practical purpose? Apple just put it there to be malicious? lol

kjksf 7y ago

Slow boiling frog. Given the history of what Apple did in the past, I think it's very naive that this is the last restriction Apple will add. First the user could run any app. Then you had to sign the app or the user would see a scary warning. Then you had to sign the app or, by default, the user could not open the app, unless he enables it via a UI that is very confusing (and I assume on purpose). Now you have to notorize the app. It's pretty clear that the end goal for Apple is to lock down Mac OS the same way they locked down iOS. Apple needs to protect the hostages, I mean users, from the likes of Mozilla which produces a dangerous app that duplicates built-in OS functionality, which is confusing. And it can deliver porn so think of the children! And they will in Mac OS 10.20, unless the government steps in.

vunie 7y ago
>Slow boiling frog. I agree. All this infrastructure and support doesn't make sense if it is only used on executables that have some easily modifiable fs attribute set. I fully expect apple to try to expand this on all executables at some point in the future. It'll be interesting to see if they will be able to pull it off.
velcrovan 7y ago
It's worth noting that frogs will in fact jump out of hot water no matter how slowly you bring it to a boil.

w1nst0nsm1th 7y ago

Whait until 10.16 MacOS is out. Then you will not be able anymore to open not notarized app. And for 10.17, Developers will have to pay for notarization, as an "insurance" low quality app will not end on your Macbook. For 10.18 or 10.19, nothing will run unless it's installed from the Apple store or certified with an enterprise certificate delivered by Apple. Just like on iOS. Apple has previously expressed frustration about the poor financial performance of the Mac App Store... They want to bring the iOS App Store business model on Mac in order to optimize financial return on the platform. It's on par with the T2 ship insertion in new models in order to prevent third party repair (google Rossman macbook) just to be able to ask outrageous prices for minor repair or to push for the purchase of a new model at every random glitch on your device outside of the Apple Care contract or legal warranty.. Beside, in Catallina, they just put the /System folder as a separate partition in read only mode... But even if you can still currently mount it in read-write mode, in a future version it will not be possible anymore, unless if you start in recovery mode, system used by Apple to install new version of MacOS. Soon, you will have to jailbreak your Macbook, taking advantage of a providential "bug" on a specific version, and lost all unix permission system benefits in order to install third party software (at that point cracked, because all legit developer will either have already paid for notarization/Mac App Store or abandonned the platform), just like on iOS. It's all writen betweens the lines. They're just going forward slowly enough to avoid brutal outcry from the MacOS power users base and the press.

pram 7y ago
Do you honestly believe the T2 serves no useful/practical purpose? Apple just put it there to be malicious? lol