4 ms·

> And now macOS is adopting the worst of iOS' draconian policies. You won't be able to run non-notarized apps on macOS on Apple Silicon based computers at all.

> And now macOS is adopting the worst of iOS' draconian policies. You won't be able to run non-notarized apps on macOS on Apple Silicon based computers at all. Do you have a source for this? I certainly haven't read this anywhere, but I also haven't been keeping a super close eye lately! This would both be really sad and would also essentially destroy the entire OSS community in macOS. (So I'd be very surprised if Apple actually made this change. It would also mean every numerical scientist would have to migrate off the Apple ecosystem, which would be a shame.)

supermatt 6y ago
https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11-universal-apps-beta-release-notes https://developer.apple.com/documentation/macos-release-note... "any executable must be signed with a valid signature before it’s allowed to run"
- scarface74 6y ago
  “This page is specific to the Developer Transition Kit”
  - danShumway 6y ago
    Do you genuinely, honestly believe that this policy isn't going to be expanded? The same way that we believed the original signing requirements would only be used to block specific malware, and not to enforce general policies? There are already system-level APIs that are restricted to the Mac app store[0]. If you want to use Wireguard on Mac without going through the store, your best option is probably using the command line. That's crazy; in order to get a free VPN client with a GUI running, I'm being forced to give Apple a credit card number and an email address, and there's nothing the devs can do to get around that requirement. [0]: https://lists.zx2c4.com/pipermail/wireguard/2019-February/003853.html https://lists.zx2c4.com/pipermail/wireguard/2019-February/00...
    - scarface74 6y ago
      Apple has never used signing on Macs to block specific policies. There is no review process for signing Mac apps. People have been saying exactly what you are saying since 2011.
      - danShumway 6y ago
        > Apple has never used signing on Macs to block specific policies This is literally what Epic just filed an injunction over. They're being blocked from Mac tools because of a dispute over payment methods, not because anyone thinks that Unreal Engine is literally malware. https://cdn2.unrealengine.com/epic-v-apple-8-17-20-768927327.pdf https://cdn2.unrealengine.com/epic-v-apple-8-17-20-768927327... > - Access to provisioning portal for certificate generation, and provisioning profilegeneration > [...] > - Access to Developer ID signing certificates and Kernel Extension signing certificates Yes, people have been saying this since 2011, and an important component of that fact is that within the past few weeks, Apple did it.

supermatt 6y ago

https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11-universal-apps-beta-release-notes https://developer.apple.com/documentation/macos-release-note... "any executable must be signed with a valid signature before it’s allowed to run"

scarface74 6y ago
“This page is specific to the Developer Transition Kit”
- danShumway 6y ago
  Do you genuinely, honestly believe that this policy isn't going to be expanded? The same way that we believed the original signing requirements would only be used to block specific malware, and not to enforce general policies? There are already system-level APIs that are restricted to the Mac app store[0]. If you want to use Wireguard on Mac without going through the store, your best option is probably using the command line. That's crazy; in order to get a free VPN client with a GUI running, I'm being forced to give Apple a credit card number and an email address, and there's nothing the devs can do to get around that requirement. [0]: https://lists.zx2c4.com/pipermail/wireguard/2019-February/003853.html https://lists.zx2c4.com/pipermail/wireguard/2019-February/00...
  - scarface74 6y ago
    Apple has never used signing on Macs to block specific policies. There is no review process for signing Mac apps. People have been saying exactly what you are saying since 2011.
    - danShumway 6y ago
      > Apple has never used signing on Macs to block specific policies This is literally what Epic just filed an injunction over. They're being blocked from Mac tools because of a dispute over payment methods, not because anyone thinks that Unreal Engine is literally malware. https://cdn2.unrealengine.com/epic-v-apple-8-17-20-768927327.pdf https://cdn2.unrealengine.com/epic-v-apple-8-17-20-768927327... > - Access to provisioning portal for certificate generation, and provisioning profilegeneration > [...] > - Access to Developer ID signing certificates and Kernel Extension signing certificates Yes, people have been saying this since 2011, and an important component of that fact is that within the past few weeks, Apple did it.