3 ms·

Sure, if you run software from strangers on the internet, while explicitly giving them access to your systems, bad things can happen. But SIP is definitely a ne

by nomel 7mo ago

Sure, if you run software from strangers on the internet, while explicitly giving them access to your systems, bad things can happen. But SIP is definitely a net good that makes many things directly impossible. Do you have a system in mind that prevents the user from doing this?

bigyabai 7mo ago
> Do you have a system in mind that prevents the user from doing this? Sure, macOS could adopt an iPad-style security system that refuses to run all software outside the App Store. It works on iPhone and iPad just fine, all the prosumers love it. It's not like native darwin triples are a popular compilation target. There wouldn't be any vast tragedy if the macOS shellutil authors were told to use zsh in a VM instead, it would separate the parts of macOS that Apple cares about from the parts they don't seriously support. WSL and Crostini achieves this on vastly weaker hardware with great results.
- tgv 7mo ago
  macOS does precisely that out of the box, doesn't it? You have to change some settings to run other software. I've got it set to: allow notarized, warn for internet downloads (even if notarized), everything else after explicit permission.
  - DaiPlusPlus 7mo ago
    The NodeJS ARM executable can be signed by Apple; but that has no bearing on the JS code in NPM packages you’d be running. Native code-signing only protects native entrypoints.
    - nomel 7mo ago
      You have to give NodeJS, somewhat individual, access to the system by clicking various prompts that pop up the first time it tries to access some things, in a relatively naggy way. This includes incoming network access. You also have to give terminal access to do anything. So there's explicit permission, that you granted, involved. But, I understand your point, and agree. It should be possible, I just doubt think it works result in something anyone would use. There's obviously a compromise between security and letting developers use their computer in ways that aren't possible on an iPad.

by nomel 7mo ago

bigyabai 7mo ago

> Do you have a system in mind that prevents the user from doing this? Sure, macOS could adopt an iPad-style security system that refuses to run all software outside the App Store. It works on iPhone and iPad just fine, all the prosumers love it. It's not like native darwin triples are a popular compilation target. There wouldn't be any vast tragedy if the macOS shellutil authors were told to use zsh in a VM instead, it would separate the parts of macOS that Apple cares about from the parts they don't seriously support. WSL and Crostini achieves this on vastly weaker hardware with great results.

tgv 7mo ago
macOS does precisely that out of the box, doesn't it? You have to change some settings to run other software. I've got it set to: allow notarized, warn for internet downloads (even if notarized), everything else after explicit permission.
- DaiPlusPlus 7mo ago
  The NodeJS ARM executable can be signed by Apple; but that has no bearing on the JS code in NPM packages you’d be running. Native code-signing only protects native entrypoints.
  - nomel 7mo ago
    You have to give NodeJS, somewhat individual, access to the system by clicking various prompts that pop up the first time it tries to access some things, in a relatively naggy way. This includes incoming network access. You also have to give terminal access to do anything. So there's explicit permission, that you granted, involved. But, I understand your point, and agree. It should be possible, I just doubt think it works result in something anyone would use. There's obviously a compromise between security and letting developers use their computer in ways that aren't possible on an iPad.