8 ms·
> This is not just for files downloaded from the internet, nor is it only when you launch them via Finder, this is everything. So even if you write a one line s
by nromiun 6y ago
> This is not just for files downloaded from the internet, nor is it only when you launch them via Finder, this is everything. So even if you write a one line shell script and run it in a terminal, you will get a delay!
> Apple’s most recent OS where it appears that low-level system API such as exec and getxattr now do synchronous network activity before returning to the caller.
Can anyone confirm this? Because honestly this is just terrifying. I don't think even Windows authorises every process from a server. This doesn't sound good for both privacy and speed.
- greatjack613 6y agoPrivacy it may be a plus since in theory notarization provides some protection. Speed, definitely not, this is going to make things slowwwww
- tromp 6y ago> provides some protection. That's security, not privacy...
- sooheon 6y agoAlthough insecurity leads to less privacy as well.
- ashtonkem 6y agoInsecurity leads to loss of privacy, but security does not lead to privacy. Things can be secure and non-private by design.
- yjftsjthsd-h 6y agoSometimes, but sometimes security measures lead to less privacy. Say, if executing local programs sends information to a remote server.
- Razengan 6y agoIf that information can’t be used to identify anyone then it retains privacy while being secure. Being slow would still be an issue.
- simion314 6y agoBut you can't be 100% sure that the server where the information is sent is not putting in a database your IP, the app you run and whatever else. As a power user I would prefer a prompt before anything is sent.
- mbreese 6y agoThere are two new Security/Privacy Settings that I just noticed last night. "Full Disk Access" to allow a program to access any place on your computer without a warning. A few programs requested this, so it looks like it's been around for a while. The other one is "Developer Tools" and it looks pretty new. The only application requesting it is "Terminal". This "allows app to run software locally that do not meet the system's security policy". So, my reading of this is that in Terminal, you could run scripts that are unsigned and not be penalized speed-wise.
- 0x0 6y agoI wonder what "Developer Tools" grants in practice. Clicking the (?) for viewing built-in help does not mention this particular setting, it skips right over it going from "Automation" above it to "Advertising" below it.
- oefrha 6y agoI don't see it on macOS 10.15.4 (19E287). The full list of categories on my Privacy tab: - Location Services - Contacts - Calendars - Reminders - Photos - Camera - Microphone - Speech Recognition - Accessibility - Input Monitoring - Full Disk Access - Files and Folders - Screen Recording - Automation - Advertising - Analytics & Improvements Granted I don't typically use Terminal.app (iTerm 2 user), so I launched terminal and did some privileged stuff. Had to grant Full Disk Access to, say, `ls ~/Library/Mail`, but "Developer Tools" never popped up. Are you running a beta build or something? --- Update: Okay, I checked on my other machine and that one does have it (Terminal is listed but disabled by default). What in the actual fuck?!?
- ccmcarey 6y agoHow could this possibly not be absolutely awful on projects that run hundreds of executables during their execution (e.g. some shell wrappers like oh-my-zsh call out to a large amount of different scripts every time they run).
- parhamn 6y agoI can confirm that executing a trivial script takes 20-200ms longer on the first run. Using 10.15.
- neurobashing 6y agonot sure if I'm lucky or somehow I disabled something but the trivial script problem isn't affecting me on any of my machines. I am using Homebrew for a large % of command line/scripting so maybe that's why?
- deleted 6y ago[deleted]
- dTal 6y agoMaking this about speed is burying the lede. From a privacy and user-freedom perspective, it's horrifying. Don't think so? Apple now theoretically has a centralized database of every Mac user who's ever used youtube-dl. Or Tor. Or TrueCrypt.
- threeseed 6y agoApple already has every iPhone user's photos, messages, browsing history, keychains etc. Not sure how a list of installed apps is going to be worse than that.
- saagarjha 6y agoNot if you choose to not sync them.
- radicaldreamer 6y agoYup, you can choose to not use iCloud backup and back up offline in an encrypted way (even over wifi) if you’d like.
- gitgud 6y agoRichard Stallman's ideals have become a bit less crazy for me now... Either you have the ability to control the software, or it controls you
- verytrivial 6y agoI think coming to this realisation about Stallman's ideas (not the man, mind) is something that most rational computer users are bound to do. It happens at different times for different people, but I think people very rarely go back after that "Hang on a second ....??" moment.
- m463 6y agoI remember once he said "proprietary software subjugates people" and I just sort of blinked a bit. It seemed sort of over the top. And over time I started to understand that the way things end up working out, it is very true.