10 ms·

macOS gatekeeper and file quarantine bypass

351 points by robertkrahn01 5y ago

deleted 5y ago
[deleted]
tehwebguy 5y ago
Does this mean we can trick Big Sur into not treating TypeScript files like DVD rips?
pehtis 5y ago
I will never understand why "Show all filename extensions" is unchecked by default in Finder.
- benhurmarcel 5y ago
  Unchecked by default is fine, what bothers me a lot is that it's impossible to display filename extensions on iOS/iPadOS.
- Closi 5y ago
  It's also unchecked in Windows by default - I suspect that in reality the concept of extensions probably confuses some users, who end up changing the extension and then struggle to work out how to open their saved files. ( I always prefer to see the extensions too though :) )
  - symlinkk 5y ago
    This is an outdated mindset. Literally everyone knows the difference between .docx and .jpg in 2021.
    - inb4_cancelled 5y ago
      You're living in a beautiful bubble.
  - setr 5y ago
    Windows gives you a big warning when you change the extension, which seems to me both sufficient and better than hiding the extension altogether (which, like URL hiding, is a fairly dangerous and largely unnecessary convenience)
    - judge2020 5y ago
      I've learned to never underestimate users' ability to shoot themselves in the foot. People will click through any popup dialogue which might suggest that their decision to perform an action was wrong.
      - FridayoLeary 5y ago
        because most of them are clearly fearmongering by ms, apple et al, scaring you into staying subscribed to their particular product. If they abuse their own warning systems, why should we respect them?
    - djxfade 5y ago
      It works exactly the same way in macOS Finder as in Windows Explorer. Extensions are hidden by default. You can enable to show extensions (either by individual file, or globally). If a file has it's extension shown, you will get a confirmation prompt warning you of the consequences by changing the file extension.
    - vbezhenar 5y ago
      Users are well-trained to ignore warnings.
    - davemp 5y ago
      Like browsers, file navigation UIs could also just grey out the file extension.
    - dataflow 5y ago
      The warning is a massive inconvenience. It reverts the file name if you cancel, so if you spent any effort on the new name, it will be wasted. Moreover, people often expect to change the file type by changing the name, and they get confused when it doesn't work (or it works for them in some case and they expect it will work here too). Lastly, users often don't read error messages, let alone understand them ("file extension" is hardly an easy concept...), so it's not necessarily helpful to them. Really, the number of cases where you'd need to change a file extension are so small compared to when you don't that I completely understand why they made this choice. It's imperfect, but I don't know of a better solution.
  - ziml77 5y ago
    Isn't it also confusing for the average user when they end up with identical looking files? I didn't realize that macOS had per-file extension hiding until I synced some images over from my iPad. I ended up with files that I couldn't tell apart at a glance because they had the same name but were different image file types. I'm now torn if I actually want to force all extensions to show because I think showing applications as "Foo.app" is ugly (I know, it's a stupid reason to dislike the option...)
    - dannyw 5y ago
      Nothing stops you from putting the same label on multiple boxes in real life.
- elliekelly 5y ago
  Is there any way to turn this off only for applications? Or even just in the applications directory? I find it irrationally annoying that everything in the applications folder shows the ".app" extension.
  - floatingatoll 5y ago
    If you use the dashboard app switcher (iirc the F3 or F4 key), it hides .app in that list, it has a search field and I believe it accepts drag-and-drops. That’s not exactly an answer to your question, but there’s a chance it’s an acceptable solution, so duly noted.
    - lostgame 5y ago
      It's F4 on my MacBook Pro 2018 Catalina. :)
- boomboomsubban 5y ago
  Genuine question, does MacOS actually care about file extensions? I would guess not, though there are probably some compatibility features that will do things if they are there.
  - trissylegs 5y ago
    Yes. Take a JPEG with extension. It opens fine. Get a file with .jfif macOS doesn't know what the hell it is. Same file format, weird extension. (For some reason twitter was saving files as .jfif for a while)
  - bigbizisverywyz 5y ago
    OSX does care, but classic Mac OS didn't used to. It had a separate resource fork that described what the file was, and after that you could name it anything you liked.
  - bobbylarrybobby 5y ago
    I was under the impression that unless a file contains some other metadata (most don't), that the extension is the way the OS chooses which app to use to open it.
    - boomboomsubban 5y ago
      Unix-based has almost always used internal metadata, and the "dot" is just another character. I thought Windows was unique in relying on the suffixes, but Wikipedia suggests MacOS inherited some form from NextSTEP.
      - spijdar 5y ago
        "Unix" OSes in my experience simply don't (universally) have a way to "open this file in the correct application". It's a foreign concept. Files are just sequences of bytes, and file paths are just addresses to those bytes. The file extensions are, then, purely for the sake of the user, as there is no (standard) way to store file metadata. There are specific filesystems with these metadata extensions, but otherwise, you need to resort to commands like file and libmagic for heuristics on determining file-type. Or just use the file suffix, which is AFAIK what all the mainstream Linux desktop environments do, through Freedesktop's MIME implementation. I don't know if it supports using metadata or file magics instead, but a quick glance shows almost every MIME definition uses file globbing. You can check this in the files located at "/usr/share/mime/application" and "/usr/share/mime/packages" on most distros. Most (all?) definitions use a "glob pattern" to match files.
- jpeter 5y ago
  Same on windows
- spurgu 5y ago
  Or how to navigate to /Users/<username>. You have to manually add it to the sidebar from Preferences.
  - gempir 5y ago
    That part is so perplexing. Apple wants you to use that folder! Multiple useful things are stored in it, but you have to jump through hoops to go do it. It should be added as a favourite by default.
smoldesu 5y ago
Gatekeeper is one of the most frustrating things I have to fight whenever I try using MacOS. It feels like DRM for my applications, which in turn makes everything feel clunkier, and less integrated. I would genuinely pay Apple extra for a version of MacOS that just trusts me and lets me install what I want without the some esoteric mechanism stopping me at every step of the way...
- minhazm 5y ago
  You can disable Gatekeeper. https://disable-gatekeeper.github.io/ https://disable-gatekeeper.github.io/
- kstrauser 5y ago
  What frustrates you about it? I rarely bump into Gatekeeper and I'm doing the normal dev things.
  - Isthatablackgsd 5y ago
    I'm assuming you don't use the package manager like Homebrew or MacPorts? this is where the gatekeeper will annoy the hell out of me. Apps installed via Homebrew often will encounter Gatekeeper alerts. Half of them will give the option to open it and the other half, the gatekeeper --demands-- gently ask me to put it in the Trash without the option to open it.
    - lilyball 5y ago
      Homebrew and MacPorts don't add the quarantine flag to the software they're installing. If you're getting Gatekeeper alerts for software installed this way, then something else must be going on.
      - saagarjha 5y ago
        Homebrew Cask does.
    - xrisk 5y ago
lovelyviking 5y ago
>But first, go update your macOS systems to 11.3 Unofortunately the risk is to high. Last time I was trying to update to 11.2 my MacBook M1 showed black screen with instruction to find another Mac. During Covid situation I had to endanger myself with going to look for this 'another' Mac. No thank you very much. Not possible for now, who knows will it stuck this time or not. I do not wish loose my ability to work again. Looks like to update safely you need to have another Mac. I mean if you for sure wish to get the guaranteed result. BTW, I was reporting about this situation over here and about my surprise to the amount of bugs I have stumbled on . For those who was fast to suggest that there is some hardware issue with this specific machine - you were too fast to suggest something that you wanted very much to be the case. I leave it to your karma why you wanted it but No hardware issues have been found so far till this very day. It passes all tests including speed tests. All of the problems were software bugs and issues. All of them were perfectly known when you search the info about them. For instance ScreenShot was slow when Mic was selected as sound input source for Screen Video Recording. ScreenShot have nothing to do with Mic as far as I know because no sound is recorded in ScreenShot last time I've checked :) and yet it was slow because of that(I guess it was trying to initialize the Mic for each screenshot). Once you select None as sound input source for Screen Video Recording the ScreenShot works again quickly like it supposed to be. If this is not funny then what is? And it's very known problem if you google it, yet some people were donwvoting even that! Some people do not like facts it seems. So I state again what I was stating back then. It's so far the buggiest Mac I ever had.
kossTKR 5y ago
Does anyone know how trustworthy this objective-see project is? I remember once installing several of his apps, but then coming to the conclusion that i don't know enough - even though he consistently seems to find and fix flaws in OSX. Why isn't Apple hiring this man? EDIT: Why are people downvoting this question? If i'm implying something then i'm unaware of it.
- savoytruffle 5y ago
  Some people don't want to be coerced into working remotely near Cupertino …
  - kossTKR 5y ago
    And that's fair, i wouldn't either, what i mean is they should seriously consider giving him some consultancy fees, bounties / whatever since he's consistently doing good work.
  - jrochkind1 5y ago
    i don't get it
- ghughes 5y ago
  The tools are legit, and the bugs are real, but he has a distasteful habit of feeding sensationalist quotes to outlets like Forbes and Vice. This time, he told Forbes that "the hacks effectively take Mac security back a decade" [1], and Vice quotes him as saying "this is likely the worst or potentially the most impactful bug to everyday macOS users in recent memory". [2] Forbes ran the story with the headline "The ‘Worst Hack In Years’ Hits Apple Computers", and that's bullshit. 1. https://www.forbes.com/sites/thomasbrewster/2021/04/26/update-your-mac-now-the-worst-hack-in-years-hits-apple-computers/ https://www.forbes.com/sites/thomasbrewster/2021/04/26/updat... 2. https://www.vice.com/en/article/wx5855/massive-mac-apple-security-bug-malware-hack https://www.vice.com/en/article/wx5855/massive-mac-apple-sec...
  - kossTKR 5y ago
    Thanks for the insight! Seems like quite a talented dude but with the mandatory eccentricity that seemingly often comes with . Great to know that the tools are legit.
pier25 5y ago
Did Apple finally fix the bug where every Big Sur update nukes Xcode tools like Git?
- ezfe 5y ago
  No problems here - I'm on beta cycle so I get new Big Sur updates fairly often (every few weeks) and haven't had any git issues.
jdlshore 5y ago
Fascinating article. Short version: there was a bug in the part of Apple’s Gatekeeper code that checked whether a file was an application bundle. Bundles that only contained a script, and not a plist file, were considered “not a bundle,” and this bypasses the Gatekeeper checks. The issue is fixed in the latest version of Big Sur. Be sure to upgrade. It’s being exploited in the wild.
- submeta 5y ago
  What about macOS Catalina users? Any updates / fixes for them? Do you happen to know?
  - therealmarv 5y ago
    The bad thing is: They patched Catalina less than Big Sur with the new update :( Compare "Gatekeeper" fixed issues here: https://support.apple.com/en-us/HT212326 https://support.apple.com/en-us/HT212326 Catalina https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325 Big Sur Feels for me that they only patched one part of it on Catalina but gates are more open on the older macOS. Really don't like that.
  - phnofive 5y ago
    It appears this behavior was introduced in Catalina, so I’d assume a complimentary fix to 11.3 will be available for 10.x - no word on timing AFAIK.
    - ilikepi 5y ago
      Security Update bundles were released for Catalina and Mojave as well. The list of security fixes for the Big Sur update 11.3 has three entries mentioning Gatekeeper: https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325 ...whereas the list for Catalina has only one: https://support.apple.com/kb/HT212326 https://support.apple.com/kb/HT212326
- benatkin 5y ago
  > Be sure to upgrade. This is a technical crowd, so some of us don't need to rush to download things like this. I'll upgrade when it's convenient, thank you very much.
deleted 5y ago
[deleted]
aledalgrande 5y ago
Is it me or Apple isn't even listing the patch in the 11.3 changelog? https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11_3-release-notes https://developer.apple.com/documentation/macos-release-note...
- infinita740 5y ago
  Security patches are in a separate article: https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325
  - aledalgrande 5y ago
    Oh cool thanks!
zanethomas 5y ago
nice!!!
sharikone 5y ago
I feel that macOS has slowly become a mess. From Lion, more or less. Overcomplicated and bloated security features, telemetry, iOSification of the UI, dumbed down settings, bugs.. Perhaps the time has come to shed some legacy and restart again from scratch (like Google Fuchsia) or to invest some of the hundreds of billions they have in refining the software so it actually works
Quiark 5y ago
Somehow none of this is applied to packaged shell script into an .app which runs on double-click with no message whatsoever. Malware doesn't always have to be a binary...
lilyball 5y ago
I’m really disappointed that this blog post didn’t dive into why the bug vanishes with SIP disabled.

351 points by robertkrahn01 5y ago

deleted 5y ago

[deleted]

tehwebguy 5y ago

Does this mean we can trick Big Sur into not treating TypeScript files like DVD rips?

pehtis 5y ago

I will never understand why "Show all filename extensions" is unchecked by default in Finder.

benhurmarcel 5y ago
Unchecked by default is fine, what bothers me a lot is that it's impossible to display filename extensions on iOS/iPadOS.
Closi 5y ago
It's also unchecked in Windows by default - I suspect that in reality the concept of extensions probably confuses some users, who end up changing the extension and then struggle to work out how to open their saved files. ( I always prefer to see the extensions too though :) )
- symlinkk 5y ago
  This is an outdated mindset. Literally everyone knows the difference between .docx and .jpg in 2021.
  - inb4_cancelled 5y ago
    You're living in a beautiful bubble.
- setr 5y ago
  Windows gives you a big warning when you change the extension, which seems to me both sufficient and better than hiding the extension altogether (which, like URL hiding, is a fairly dangerous and largely unnecessary convenience)
  - judge2020 5y ago
    I've learned to never underestimate users' ability to shoot themselves in the foot. People will click through any popup dialogue which might suggest that their decision to perform an action was wrong.
    - FridayoLeary 5y ago
      because most of them are clearly fearmongering by ms, apple et al, scaring you into staying subscribed to their particular product. If they abuse their own warning systems, why should we respect them?
  - djxfade 5y ago
    It works exactly the same way in macOS Finder as in Windows Explorer. Extensions are hidden by default. You can enable to show extensions (either by individual file, or globally). If a file has it's extension shown, you will get a confirmation prompt warning you of the consequences by changing the file extension.
  - vbezhenar 5y ago
    Users are well-trained to ignore warnings.
  - davemp 5y ago
    Like browsers, file navigation UIs could also just grey out the file extension.
  - dataflow 5y ago
    The warning is a massive inconvenience. It reverts the file name if you cancel, so if you spent any effort on the new name, it will be wasted. Moreover, people often expect to change the file type by changing the name, and they get confused when it doesn't work (or it works for them in some case and they expect it will work here too). Lastly, users often don't read error messages, let alone understand them ("file extension" is hardly an easy concept...), so it's not necessarily helpful to them. Really, the number of cases where you'd need to change a file extension are so small compared to when you don't that I completely understand why they made this choice. It's imperfect, but I don't know of a better solution.
- ziml77 5y ago
  Isn't it also confusing for the average user when they end up with identical looking files? I didn't realize that macOS had per-file extension hiding until I synced some images over from my iPad. I ended up with files that I couldn't tell apart at a glance because they had the same name but were different image file types. I'm now torn if I actually want to force all extensions to show because I think showing applications as "Foo.app" is ugly (I know, it's a stupid reason to dislike the option...)
  - dannyw 5y ago
    Nothing stops you from putting the same label on multiple boxes in real life.
elliekelly 5y ago
Is there any way to turn this off only for applications? Or even just in the applications directory? I find it irrationally annoying that everything in the applications folder shows the ".app" extension.
- floatingatoll 5y ago
  If you use the dashboard app switcher (iirc the F3 or F4 key), it hides .app in that list, it has a search field and I believe it accepts drag-and-drops. That’s not exactly an answer to your question, but there’s a chance it’s an acceptable solution, so duly noted.
  - lostgame 5y ago
    It's F4 on my MacBook Pro 2018 Catalina. :)
boomboomsubban 5y ago
Genuine question, does MacOS actually care about file extensions? I would guess not, though there are probably some compatibility features that will do things if they are there.
- trissylegs 5y ago
  Yes. Take a JPEG with extension. It opens fine. Get a file with .jfif macOS doesn't know what the hell it is. Same file format, weird extension. (For some reason twitter was saving files as .jfif for a while)
- bigbizisverywyz 5y ago
  OSX does care, but classic Mac OS didn't used to. It had a separate resource fork that described what the file was, and after that you could name it anything you liked.
- bobbylarrybobby 5y ago
  I was under the impression that unless a file contains some other metadata (most don't), that the extension is the way the OS chooses which app to use to open it.
  - boomboomsubban 5y ago
    Unix-based has almost always used internal metadata, and the "dot" is just another character. I thought Windows was unique in relying on the suffixes, but Wikipedia suggests MacOS inherited some form from NextSTEP.
    - spijdar 5y ago
      "Unix" OSes in my experience simply don't (universally) have a way to "open this file in the correct application". It's a foreign concept. Files are just sequences of bytes, and file paths are just addresses to those bytes. The file extensions are, then, purely for the sake of the user, as there is no (standard) way to store file metadata. There are specific filesystems with these metadata extensions, but otherwise, you need to resort to commands like file and libmagic for heuristics on determining file-type. Or just use the file suffix, which is AFAIK what all the mainstream Linux desktop environments do, through Freedesktop's MIME implementation. I don't know if it supports using metadata or file magics instead, but a quick glance shows almost every MIME definition uses file globbing. You can check this in the files located at "/usr/share/mime/application" and "/usr/share/mime/packages" on most distros. Most (all?) definitions use a "glob pattern" to match files.
jpeter 5y ago
Same on windows
spurgu 5y ago
Or how to navigate to /Users/<username>. You have to manually add it to the sidebar from Preferences.
- gempir 5y ago
  That part is so perplexing. Apple wants you to use that folder! Multiple useful things are stored in it, but you have to jump through hoops to go do it. It should be added as a favourite by default.

smoldesu 5y ago

Gatekeeper is one of the most frustrating things I have to fight whenever I try using MacOS. It feels like DRM for my applications, which in turn makes everything feel clunkier, and less integrated. I would genuinely pay Apple extra for a version of MacOS that just trusts me and lets me install what I want without the some esoteric mechanism stopping me at every step of the way...

minhazm 5y ago
You can disable Gatekeeper. https://disable-gatekeeper.github.io/ https://disable-gatekeeper.github.io/
kstrauser 5y ago
What frustrates you about it? I rarely bump into Gatekeeper and I'm doing the normal dev things.
- Isthatablackgsd 5y ago
  I'm assuming you don't use the package manager like Homebrew or MacPorts? this is where the gatekeeper will annoy the hell out of me. Apps installed via Homebrew often will encounter Gatekeeper alerts. Half of them will give the option to open it and the other half, the gatekeeper --demands-- gently ask me to put it in the Trash without the option to open it.
  - lilyball 5y ago
    Homebrew and MacPorts don't add the quarantine flag to the software they're installing. If you're getting Gatekeeper alerts for software installed this way, then something else must be going on.
    - saagarjha 5y ago
      Homebrew Cask does.
  - xrisk 5y ago

lovelyviking 5y ago

>But first, go update your macOS systems to 11.3 Unofortunately the risk is to high. Last time I was trying to update to 11.2 my MacBook M1 showed black screen with instruction to find another Mac. During Covid situation I had to endanger myself with going to look for this 'another' Mac. No thank you very much. Not possible for now, who knows will it stuck this time or not. I do not wish loose my ability to work again. Looks like to update safely you need to have another Mac. I mean if you for sure wish to get the guaranteed result. BTW, I was reporting about this situation over here and about my surprise to the amount of bugs I have stumbled on . For those who was fast to suggest that there is some hardware issue with this specific machine - you were too fast to suggest something that you wanted very much to be the case. I leave it to your karma why you wanted it but No hardware issues have been found so far till this very day. It passes all tests including speed tests. All of the problems were software bugs and issues. All of them were perfectly known when you search the info about them. For instance ScreenShot was slow when Mic was selected as sound input source for Screen Video Recording. ScreenShot have nothing to do with Mic as far as I know because no sound is recorded in ScreenShot last time I've checked :) and yet it was slow because of that(I guess it was trying to initialize the Mic for each screenshot). Once you select None as sound input source for Screen Video Recording the ScreenShot works again quickly like it supposed to be. If this is not funny then what is? And it's very known problem if you google it, yet some people were donwvoting even that! Some people do not like facts it seems. So I state again what I was stating back then. It's so far the buggiest Mac I ever had.

kossTKR 5y ago

Does anyone know how trustworthy this objective-see project is? I remember once installing several of his apps, but then coming to the conclusion that i don't know enough - even though he consistently seems to find and fix flaws in OSX. Why isn't Apple hiring this man? EDIT: Why are people downvoting this question? If i'm implying something then i'm unaware of it.

savoytruffle 5y ago
Some people don't want to be coerced into working remotely near Cupertino …
- kossTKR 5y ago
  And that's fair, i wouldn't either, what i mean is they should seriously consider giving him some consultancy fees, bounties / whatever since he's consistently doing good work.
- jrochkind1 5y ago
  i don't get it
ghughes 5y ago
The tools are legit, and the bugs are real, but he has a distasteful habit of feeding sensationalist quotes to outlets like Forbes and Vice. This time, he told Forbes that "the hacks effectively take Mac security back a decade" [1], and Vice quotes him as saying "this is likely the worst or potentially the most impactful bug to everyday macOS users in recent memory". [2] Forbes ran the story with the headline "The ‘Worst Hack In Years’ Hits Apple Computers", and that's bullshit. 1. https://www.forbes.com/sites/thomasbrewster/2021/04/26/update-your-mac-now-the-worst-hack-in-years-hits-apple-computers/ https://www.forbes.com/sites/thomasbrewster/2021/04/26/updat... 2. https://www.vice.com/en/article/wx5855/massive-mac-apple-security-bug-malware-hack https://www.vice.com/en/article/wx5855/massive-mac-apple-sec...
- kossTKR 5y ago
  Thanks for the insight! Seems like quite a talented dude but with the mandatory eccentricity that seemingly often comes with . Great to know that the tools are legit.

pier25 5y ago

Did Apple finally fix the bug where every Big Sur update nukes Xcode tools like Git?

ezfe 5y ago
No problems here - I'm on beta cycle so I get new Big Sur updates fairly often (every few weeks) and haven't had any git issues.

jdlshore 5y ago

Fascinating article. Short version: there was a bug in the part of Apple’s Gatekeeper code that checked whether a file was an application bundle. Bundles that only contained a script, and not a plist file, were considered “not a bundle,” and this bypasses the Gatekeeper checks. The issue is fixed in the latest version of Big Sur. Be sure to upgrade. It’s being exploited in the wild.

submeta 5y ago
What about macOS Catalina users? Any updates / fixes for them? Do you happen to know?
- therealmarv 5y ago
  The bad thing is: They patched Catalina less than Big Sur with the new update :( Compare "Gatekeeper" fixed issues here: https://support.apple.com/en-us/HT212326 https://support.apple.com/en-us/HT212326 Catalina https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325 Big Sur Feels for me that they only patched one part of it on Catalina but gates are more open on the older macOS. Really don't like that.
- phnofive 5y ago
  It appears this behavior was introduced in Catalina, so I’d assume a complimentary fix to 11.3 will be available for 10.x - no word on timing AFAIK.
  - ilikepi 5y ago
    Security Update bundles were released for Catalina and Mojave as well. The list of security fixes for the Big Sur update 11.3 has three entries mentioning Gatekeeper: https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325 ...whereas the list for Catalina has only one: https://support.apple.com/kb/HT212326 https://support.apple.com/kb/HT212326
benatkin 5y ago
> Be sure to upgrade. This is a technical crowd, so some of us don't need to rush to download things like this. I'll upgrade when it's convenient, thank you very much.

deleted 5y ago

[deleted]

aledalgrande 5y ago

Is it me or Apple isn't even listing the patch in the 11.3 changelog? https://developer.apple.com/documentation/macos-release-notes/macos-big-sur-11_3-release-notes https://developer.apple.com/documentation/macos-release-note...

infinita740 5y ago
Security patches are in a separate article: https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325
- aledalgrande 5y ago
  Oh cool thanks!

zanethomas 5y ago

nice!!!

sharikone 5y ago

I feel that macOS has slowly become a mess. From Lion, more or less. Overcomplicated and bloated security features, telemetry, iOSification of the UI, dumbed down settings, bugs.. Perhaps the time has come to shed some legacy and restart again from scratch (like Google Fuchsia) or to invest some of the hundreds of billions they have in refining the software so it actually works

Quiark 5y ago

Somehow none of this is applied to packaged shell script into an .app which runs on double-click with no message whatsoever. Malware doesn't always have to be a binary...

lilyball 5y ago

I’m really disappointed that this blog post didn’t dive into why the bug vanishes with SIP disabled.