3 ms·

Notarization is not required, and kexts [will] have a userspace alternate.

userbinator 7y ago
Notarization is not required ...for now. and kexts [will] have a userspace alternate. ...which is unlikely to have the same performance and control benefits as running "on the hardware", and I bet they will also gradually lobotomise the APIs in userspace too. Apple's control-freak attitude is nothing new. This is just another step along their plan to turn desktops and laptops into the same dumbed-down walled-garden platform as mobile devices.
- kitsunesoba 7y ago
  I understand where this sentiment is coming from but I think that it may be a little alarmist. Security has been lagging behind in desktop operating systems for a long time now… it was only a matter of time that they’d catch up because it’s become increasingly clear that unquestionably running code that can steal or destroy user data and especially code with kernel access is a catastrophically bad idea in an always-connected world. I suspect that even Linux will be adopting a more restrictive (if decentralized and overridable) model for third party binaries sooner than later.
  - userbinator 7y ago
    Two decades ago, most people thought Stallman was alarmist... but he was right. because it’s become increasingly clear that unquestionably running code that can steal or destroy user data and especially code with kernel access is a catastrophically bad idea in an always-connected world ...and over the years I have increasingly become convinced that "security" is simply a convenient and difficult-to-oppose excuse to take away freedoms and push society towards an authoritarian dystopia by spreading such fearmongering paranoia. There's enough sci-fi around to show what that could look like.
    - deleted 7y ago
      [deleted]
    - Angostura 7y ago
      > over the years I have increasingly become convinced that "security" is simply a convenient and difficult-to-oppose excuse to take away freedoms and push society towards an authoritarian dystopia ... and presumably you'll continue to feel that way right up to the point that a bit of malware steals your banking credentials or encrypts your hard drive and demands a Bitcoin ransom.
  - AndriyKunitsyn 7y ago
    Reminds me of how Steve Jobs opposed releasing iOS SDK to the public and wanted to replace everything with web apps. Why? In the name of security, of course! You absolutely do not need kexts to steal user data, it's totally orthogonal to user's data security, and I think (correct me if I'm wrong) even in Catalina this XKCD is still relevant: https://xkcd.com/1200/ https://xkcd.com/1200/

Notarization is not required ...for now. and kexts [will] have a userspace alternate. ...which is unlikely to have the same performance and control benefits as running "on the hardware", and I bet they will also gradually lobotomise the APIs in userspace too. Apple's control-freak attitude is nothing new. This is just another step along their plan to turn desktops and laptops into the same dumbed-down walled-garden platform as mobile devices.

kitsunesoba 7y ago
I understand where this sentiment is coming from but I think that it may be a little alarmist. Security has been lagging behind in desktop operating systems for a long time now… it was only a matter of time that they’d catch up because it’s become increasingly clear that unquestionably running code that can steal or destroy user data and especially code with kernel access is a catastrophically bad idea in an always-connected world. I suspect that even Linux will be adopting a more restrictive (if decentralized and overridable) model for third party binaries sooner than later.
- userbinator 7y ago
  Two decades ago, most people thought Stallman was alarmist... but he was right. because it’s become increasingly clear that unquestionably running code that can steal or destroy user data and especially code with kernel access is a catastrophically bad idea in an always-connected world ...and over the years I have increasingly become convinced that "security" is simply a convenient and difficult-to-oppose excuse to take away freedoms and push society towards an authoritarian dystopia by spreading such fearmongering paranoia. There's enough sci-fi around to show what that could look like.
  - deleted 7y ago
    [deleted]
  - Angostura 7y ago
    > over the years I have increasingly become convinced that "security" is simply a convenient and difficult-to-oppose excuse to take away freedoms and push society towards an authoritarian dystopia ... and presumably you'll continue to feel that way right up to the point that a bit of malware steals your banking credentials or encrypts your hard drive and demands a Bitcoin ransom.
- AndriyKunitsyn 7y ago
  Reminds me of how Steve Jobs opposed releasing iOS SDK to the public and wanted to replace everything with web apps. Why? In the name of security, of course! You absolutely do not need kexts to steal user data, it's totally orthogonal to user's data security, and I think (correct me if I'm wrong) even in Catalina this XKCD is still relevant: https://xkcd.com/1200/ https://xkcd.com/1200/