5 ms·

> Why is it horrible advice? It’s equivalent to telling someone to use Linux, which doesn’t have SIP either. These two OS’s have very different types of user a

by Closi 4y ago

> Why is it horrible advice? It’s equivalent to telling someone to use Linux, which doesn’t have SIP either. These two OS’s have very different types of user and attacker (speaking in generalities), and thus different security trade-offs during design. The main risk with Mac is that someone downloads a “Mac cleaner” or something similar which installs malware, or that malware is hidden in a legitimate looking app, and this is what SIP protects against. Even informed power users can make these mistakes - it only takes downloading one compromised utility! IMO for most ‘home’ use where it is used as a main OS by a person without too much familiarity with computers, Ubuntu and many Linux distros are probably less secure than Mac - for instance the average user is conditioned to run random terminal commands they find on the internet and give them sudo permission. Obviously I’m excluding the majority of use-cases such as routers, consoles, tvs, servers where users access to the underlying OS is heavily restricted.

alexeiz 4y ago
Measures like SIP force application developers to create workarounds that compromise system security even more. Remember the recent Zoom vulnerability where they created a special service to autoupdate Zoom? If the system is too restrictive, developers will try to punch holes in it to accomplish what they need.
- buildbot 4y ago
  I for one am really really glad zoom is unable to mess with the rest of the macos system…
- Closi 4y ago
  > Measures like SIP force application developers to create workarounds that compromise system security even more. Remember the recent Zoom vulnerability where they created a special service to autoupdate Zoom? If the system is too restrictive, developers will try to punch holes in it to accomplish what they need. That wasn't related to SIP, so I don't think we can just throw random unrelated security issues against SIP to justify it being a bad thing. Bedsides, is the moral of the Zoom story really that application Developers should be given unfettered access to the OS and the freedom to do whatever they want? It sounds like the opposite - an example of exactly why security has to be built into the OS and can't be left to companies like Zoom.
  - wetpaws 4y ago
    Those who want security over performance will get neither security nor performance.
zarzavat 4y ago
Okay sure I agree that my parents shouldn’t turn off SIP, not that they would know how to. But in this case the advice comes from Allan Odgaard, the author of TextMate, on a blog called SIGPIPE. A certain amount of technical expertise can be assumed from the audience.
- Closi 4y ago
  I know we like to think we are all unique and invulnerable to these attacks, but technical people still manage to download dodgy software out in the wild. Plus, some categories of technical users like sysadmins are probably the worst possible people to disable SIP because even though the probability of attack is much lower, the potential impact is orders of magnitude higher.
  - mathewsanders 4y ago
    Yup! I had a great reminder of this recently: I always ignore spam text messages, but got a phishing attack message made to look like a USPS update about 2 months ago they almost fooled me because I had a legitimate package that was missing. I clicked the link, and even entered my email address in the landing page form and was about to enter credit card details for a $2 ‘redelivery’ charge - which I was also primed for because I’d recently paid USPS a similar amount to redirect my mail after moving. I was creating a one-time use virtual card to make the payment when my thoughts caught up with me and I realized it wasn’t a legitimate page.
  - sangnoir 4y ago
    > I know we like to think we are all unique and invulnerable to these attacks, but technical people still manage to download dodgy software out in the wild. Good old Apple, slowing my(?) Computer down daily to protect me from myself. Does anyone tally attacks by type? i suspect most successful attacks against sysadmins are via social engineering/xss/token stealing on their perfectly uncompromised machines rather than malware.
  - zarzavat 4y ago
    Ergo using Linux is irresponsible? It’s the double-think I have a problem with. Either 1) we say that Mac-using developers are stupider than Linux using-developers, and it’s irresponsible for Mac-using developers specifically to turn it off. Or 2) we say that Linux is “horribly” insecure and it’s irresponsible for developers to use Linux whatsoever and they should go out and buy a Mac immediately to save themselves. Or 3) we say that Mac-using developers are not stupider than Linux using developers and it’s fine to turn it off if they want. Personally I’ll go for #3.
lapcat 4y ago
> this is what SIP protects against SIP does not protect you against installing and running malware. SIP protects certain system components on the Mac, that's all.

by Closi 4y ago

alexeiz 4y ago

Measures like SIP force application developers to create workarounds that compromise system security even more. Remember the recent Zoom vulnerability where they created a special service to autoupdate Zoom? If the system is too restrictive, developers will try to punch holes in it to accomplish what they need.

buildbot 4y ago
I for one am really really glad zoom is unable to mess with the rest of the macos system…
Closi 4y ago
> Measures like SIP force application developers to create workarounds that compromise system security even more. Remember the recent Zoom vulnerability where they created a special service to autoupdate Zoom? If the system is too restrictive, developers will try to punch holes in it to accomplish what they need. That wasn't related to SIP, so I don't think we can just throw random unrelated security issues against SIP to justify it being a bad thing. Bedsides, is the moral of the Zoom story really that application Developers should be given unfettered access to the OS and the freedom to do whatever they want? It sounds like the opposite - an example of exactly why security has to be built into the OS and can't be left to companies like Zoom.
- wetpaws 4y ago
  Those who want security over performance will get neither security nor performance.

zarzavat 4y ago

Okay sure I agree that my parents shouldn’t turn off SIP, not that they would know how to. But in this case the advice comes from Allan Odgaard, the author of TextMate, on a blog called SIGPIPE. A certain amount of technical expertise can be assumed from the audience.

Closi 4y ago
I know we like to think we are all unique and invulnerable to these attacks, but technical people still manage to download dodgy software out in the wild. Plus, some categories of technical users like sysadmins are probably the worst possible people to disable SIP because even though the probability of attack is much lower, the potential impact is orders of magnitude higher.
- mathewsanders 4y ago
  Yup! I had a great reminder of this recently: I always ignore spam text messages, but got a phishing attack message made to look like a USPS update about 2 months ago they almost fooled me because I had a legitimate package that was missing. I clicked the link, and even entered my email address in the landing page form and was about to enter credit card details for a $2 ‘redelivery’ charge - which I was also primed for because I’d recently paid USPS a similar amount to redirect my mail after moving. I was creating a one-time use virtual card to make the payment when my thoughts caught up with me and I realized it wasn’t a legitimate page.
- sangnoir 4y ago
  > I know we like to think we are all unique and invulnerable to these attacks, but technical people still manage to download dodgy software out in the wild. Good old Apple, slowing my(?) Computer down daily to protect me from myself. Does anyone tally attacks by type? i suspect most successful attacks against sysadmins are via social engineering/xss/token stealing on their perfectly uncompromised machines rather than malware.
- zarzavat 4y ago
  Ergo using Linux is irresponsible? It’s the double-think I have a problem with. Either 1) we say that Mac-using developers are stupider than Linux using-developers, and it’s irresponsible for Mac-using developers specifically to turn it off. Or 2) we say that Linux is “horribly” insecure and it’s irresponsible for developers to use Linux whatsoever and they should go out and buy a Mac immediately to save themselves. Or 3) we say that Mac-using developers are not stupider than Linux using developers and it’s fine to turn it off if they want. Personally I’ll go for #3.

lapcat 4y ago

> this is what SIP protects against SIP does not protect you against installing and running malware. SIP protects certain system components on the Mac, that's all.