6 ms·

They are just imitating Apple's macOS - their GateKeeper also irritates you similarly when you install stuff not available in the app store (which I specificall

They are just imitating Apple's macOS - their GateKeeper also irritates you similarly when you install stuff not available in the app store (which I specifically avoid). Nobody wants their mac to turn into an iPad / iPhone.

zepto 6y ago
That’s not accurate. Gatekeeper only warns about unsigned software. It has nothing to do with whether it is in the App Store or not.
- kps 6y ago
  That's not accurate. The options in System Preferences are: Allow apps downloaded from: ○ App Store ○ App Store and identified developers There used to be a third option, ○ Anywhere but the frog is warmer now.
  - zepto 6y ago
    Your options list supports my assertion: Identified developers = signed FYI: frogs actually do jump out of water as it gets hotter. You may be right that this changes in the future, but for now I am correct.
    - Miraste 6y ago
      Apple's next move is to disallow unsigned software entirely, Gatekeeper popup or no. They already announced it for ARM Macs [0]. It currently allows adhoc signatures, but I'd be shocked if that didn't go away in the next couple of versions unless they were built locally. [0] https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11-universal-apps-beta-release-notes https://developer.apple.com/documentation/macos-release-note...
      - zepto 6y ago
        That document doesn’t appear to say what you are claiming. Disallowing unsigned software altogether would contradict other statements they have made. That said, I wouldn’t be surprised if it becomes something you can only enable from the command line. They have clearly stated that Apple Silicon Macs will be open to whatever software you want, but they may well choose to make that more difficult for inexperienced users.
        Miraste 6y ago
        "starting in macOS Big Sur 11 beta 6, the operating system enforces that any executable must be signed before it’s allowed to run." This line seems clear that unsigned code is not allowed, although I don't have a Transition Kit to try it for sure.
kmeisthax 6y ago
Getting past Gatekeeper on macOS is roughly the cost of a $100/yr developer program certificate and rigging up notarization support into your build pipeline. SmartScreen is way worse - from the grumblings I've heard it basically doesn't care all that much about code signing. Even if it did, code signing on Windows is more expensive than it is on macOS. There's constant reports of Free Software developers of niche software packages getting their new releases stopped by SmartScreen and then Microsoft manually approving it. It runs on some fuzzy logic/ML nonsense so even Microsoft themselves doesn't entirely know why SmartScreen is constantly flagging Free Software developers.

zepto 6y ago

That’s not accurate. Gatekeeper only warns about unsigned software. It has nothing to do with whether it is in the App Store or not.

kps 6y ago
That's not accurate. The options in System Preferences are: Allow apps downloaded from: ○ App Store ○ App Store and identified developers There used to be a third option, ○ Anywhere but the frog is warmer now.
- zepto 6y ago
  Your options list supports my assertion: Identified developers = signed FYI: frogs actually do jump out of water as it gets hotter. You may be right that this changes in the future, but for now I am correct.
  - Miraste 6y ago
    Apple's next move is to disallow unsigned software entirely, Gatekeeper popup or no. They already announced it for ARM Macs [0]. It currently allows adhoc signatures, but I'd be shocked if that didn't go away in the next couple of versions unless they were built locally. [0] https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11-universal-apps-beta-release-notes https://developer.apple.com/documentation/macos-release-note...
    - zepto 6y ago
      That document doesn’t appear to say what you are claiming. Disallowing unsigned software altogether would contradict other statements they have made. That said, I wouldn’t be surprised if it becomes something you can only enable from the command line. They have clearly stated that Apple Silicon Macs will be open to whatever software you want, but they may well choose to make that more difficult for inexperienced users.
      - Miraste 6y ago
        "starting in macOS Big Sur 11 beta 6, the operating system enforces that any executable must be signed before it’s allowed to run." This line seems clear that unsigned code is not allowed, although I don't have a Transition Kit to try it for sure.

kmeisthax 6y ago

Getting past Gatekeeper on macOS is roughly the cost of a $100/yr developer program certificate and rigging up notarization support into your build pipeline. SmartScreen is way worse - from the grumblings I've heard it basically doesn't care all that much about code signing. Even if it did, code signing on Windows is more expensive than it is on macOS. There's constant reports of Free Software developers of niche software packages getting their new releases stopped by SmartScreen and then Microsoft manually approving it. It runs on some fuzzy logic/ML nonsense so even Microsoft themselves doesn't entirely know why SmartScreen is constantly flagging Free Software developers.