8 ms·

Any user who does not like Gatekeeper can turn it off on their machine in ten seconds by running this in a Terminal: sudo spctl —-master-disable People wi

Any user who does not like Gatekeeper can turn it off on their machine in ten seconds by running this in a Terminal: sudo spctl —-master-disable People will say, no, that’s too big a hammer, it’s not safe… but then, like, what do you actually want? Either you keep Gatekeeper because you like the friction it introduces, or you don’t like that friction and you should go turn it off. Pick one, you obviously can’t have both! Of course, you as the developer can’t make this choice for your users… but isn’t that as it should be? The user decides what code is allowed to run on their machines. And the default setting is restrictive because anyone who knows what they’re doing can easily change it. P.S. Meanwhile, on iOS there’s no way to install unsigned software at all, and on Android (starting soon) the process takes 24 hours instead of ten seconds. That is actually ridiculous because it’s taking away user choice. P.P.S. To be clear, modern macOS has plenty of other restrictions which can’t really be turned off and which I find super annoying. Gatekeeper just isn’t one of them. Edit: I’ve just learned that as of Sequoia, you have to also tick a box in Settings after running the Terminal command. So maybe it takes 30 seconds instead of ten seconds. That’s mildly more annoying, but still doesn’t really seem like a big deal to me.

wetpaws 5mo ago
[dead]
novafunc 5mo ago
Rather than just having the options "Done" and "Move to Bin", give me an option to actually run it without having to manually go into System Settings each and every time without disabling security features? The added friction feels more like a way to force developers to pay Apple an annual fee for distributing rather than for my safety. Not saying it doesn't help with safety, just that it's more weighed to the former.
- Wowfunhappy 5mo ago
  > without disabling security features? With Gatekeeper turned off, you’ll still get a warning on first launch which you can easily click through. (Unless Apple changed something in the last few versions—let me know if that’s the case—but it would be out of character for them to remove a warning...) The “security feature” you don’t want to disable is precisely the thing you are complaining about, so I don’t understand why you’d keep it around. > The added friction feels more like a way to force developers to pay Apple an annual fee for distributing rather than for my safety. I don’t imagine Apple makes a substantial amount of money from $99/year developer subscriptions. The App Store is another story of course.
  - copperx 5mo ago
    > I don’t imagine Apple makes a substantial amount of money from $99/year developer subscriptions. The App Store is another story of course. It has a chilling effect on releasing free apps. It's going to be an interesting time soon, when even your dog will have a vibecoded app he'll want you to use.
    - Wowfunhappy 5mo ago
      I'm not saying it's good or that I like it, I just don't think Apple is doing it for the sake of developer subscription revenue, it's not enough revenue. (To be clear, my position is that most people should probably turn off Gatekeeper and then developers don't have to pay Apple anything, unless they're making very mainstream software which probably generates revenue anyway.)
  - krackers 5mo ago
    > substantial amount of money from $99/year developer subscriptions You actually do get some value, you can file two DTS tickets [1] a year which are (supposedly) looked at by a real apple engineer. Assuming they haven't outsourced it, that feels worth about $100 considering how badly documented their APIs are. [1] https://developer.apple.com/support/technical/ https://developer.apple.com/support/technical/
    - enos_feedler 5mo ago
      It also gives you the option of entry into the WWDC lottery for a chance at 2 days at Apple Park. Good networking, food and vibes.
- plufz 5mo ago
  I also have things I want to change in gatekeeper, but that feature is not one of them. Just gut feeling but I would say 110% of all users, would just click ”start” on every unsigned app if it was that easy.
  - Affric 5mo ago
    Bingo. I know I would. I am the king of knowing immediately when I have fucked up. “Undo” has made us far too comfortable with mistakes.
  - weaksauce 5mo ago
    they could do it like they do it for accessibility settings. you have to opt in for an app and you need to know damn well if it is a reputable app before giving those controls over. there's enough friction in that that it is not done by many apps but not hard enough that it's a huge ask to whitelist the app.
  - gblargg 5mo ago
    So have a buried option that power users can flip one time to add an allow button to opening untrusted apps.
    - Wowfunhappy 5mo ago
      But that's exactly what `sudo spctl --master-disable` does! You'll still see a warning dialog on first launch.
      - hedora 5mo ago
        That’s good to know, but the spelling of the command is incredibly user hostile, even by modern apple standards.
        Wowfunhappy 5mo ago
        > the spelling of the command is incredibly user hostile Well the command is spctl, so I assume it stands for (s) Security (p) Policy (ctl) Control. I agree that "ctl" for "control" is a bit weird but it's a pretty typical Unix convention: pfctl, networkctl, systemctl, etc.
- ceejayoz 5mo ago
  > give me an option to actually run it without having to manually go into System Settings each and every time without disabling security features? People reflexively hit yes to these things.
  - mrbombastic 5mo ago
    Just make it a semi-hidden multistep option like browsers when you visit a site with a bad cert, just annoying to leave what you are doing go to system settings and fiddle.
    - ceejayoz 5mo ago
      I mean, that's basically what it is.
  - dml2135 5mo ago
    At what point does optimizing the experience for those who refuse to read or think stop making sense?
    - simonask 5mo ago
      That never stops making sense. People are trying to get things done, and will choose the fastest path, and their context is that they are constantly bombarded with popups, cookie banners, two-factor prompts, captchas, and a zillion other things. They have neither the time nor the resources to distinguish what’s important and requires their attention from what doesn’t. Most people find using a computer absolutely exhausting.
- Barbing 5mo ago
  Posit it saves a decent number of folks who are unable to follow the scammer’s necessary instructions: “Press command space, no no hold down the command key - gosh it’s in the bottom left - okay, now type “privacy”, now scroll, no you scrolled too far …”
  - suzzer99 5mo ago
    Lol I would love to see a scammer try to get my mom or dad to do anything other than press the power button. He's in for a world of hurt. The other day my mom got a text saying she had a $399 charge on Apple, and to call the number if it wasn't her. So she called, because of course, why wouldn't you? Apparently the scammer finally got frustrated and hung up on her because she couldn't understand his accent.
    - Barbing 5mo ago
      :D Does your mother by chance happen to bear a striking resemblance to Kitboga?
- ProllyInfamous 5mo ago
  >give me an option to actually run it without having to manually go into System Settings I've run several PiHoles for several years, primarily on latest versions (up to v5; current is v6.4.x) – recently updating to v6 has been extremely frustrating [0], e.g: realizing that even when you tell the pi's/en0 ("internet") interface to use a specific DNS server (in GUI/network settings), it still uses the DNS-server recommended by your local DHCP server [1]. [0] I am aware that this is a joint-issue between RaspbianOS and Pi-Hole teams [1] which requires TWO sudo nmcli which newbs have no business configuring – what happened to -simple- ? ---- If you ever want to consider how crazy DNS-capture is getting, realize that Firefox/&c are all dark-patterning the abilities to turn off "secure"-DNS. The latest Raspian/Pi-Hole defaults are terrifying... [2] [2] another example: why doesn't v6 enable HTTPS localhost web-access, by default (like all previous versions?!)? Do the developers really expect us commoners to know how to generate localhost certificates – this is obviously behavior due to how the pihole useraccount behaves differently then the previously-root-blessed v5-behavior ---- Thankfully, I've kept a local copy of my favorite distro of Pihole v5, and it is readily-cloneable. When I attempted to pass a --version tag during a freshinstall (requesting v5 from remote installer), it went ahead and installed latest v6 (so why even.?!).
- krackers 5mo ago
  I remember you used to be able to right-click and then press open instead of double-clicking which would bypass gatekeeper just for that run. Not sure if it still exists though, I don't have any unsigned apps handy to test.
  - odo1242 5mo ago
    They removed it
- efficax 5mo ago
  adding a button means osascript driven malware could approve itself and you might not even see it happen
  - Wowfunhappy 5mo ago
    Hmm, I don't think that's true. How is the osascript running without getting past Gatekeeper itself? Also, how is it using UI control without TCC approval?
ryandrake 5mo ago
10 seconds or 30 seconds, it's just too much friction to ask end users to do. I actually develop on a Mac, but I've written off Apple as a target system for hobby/open source projects. Between quarantine, code signing, and notarizing (which requires $99 a year), it's just not worth it. Good for Apple users if they like this shit--I'm just not going to bother with distributing to the platform anymore. macOS is slowly getting like Windows, where, on a fresh install you have to go through and turn off all sorts of unwanted software just to have a sane environment where you, the user, are actually controlling your computer.
- seam_carver 5mo ago
  Isn't code signing even harder/more expensive on Windows?
  - kivle 5mo ago
    Well, you can still run unsigned software (by clicking through to a bit of a hidden option in the popup dialog), and they also even remove that through "reputation" if enough people approve said binary (exact bitwise binary, so every new version released will go through the same issue).
  - GeekyBear 5mo ago
    The extended validation code signing certificate you need to avoid having your installer blocked by Windows SmartScreen is quite a bit more expensive. https://stackoverflow.com/questions/48946680/how-to-avoid-the-windows-defender-smartscreen-prevented-an-unrecognized-app-fro https://stackoverflow.com/questions/48946680/how-to-avoid-th...
    - hermitcrab 5mo ago
      IIRC it also doesn't stop the Smartscreen warning appearing.
    - electroly 5mo ago
      This changed a couple years ago. EV certificates no longer get a free pass. https://learn.microsoft.com/en-us/windows/apps/package-and-deploy/smartscreen-reputation https://learn.microsoft.com/en-us/windows/apps/package-and-d... > EV certificates no longer bypass SmartScreen. Years ago, signing files with an Extended Validation (EV) code signing certificate would result in positive SmartScreen reputation by default, but this behavior no longer exists. EV certificates may matter for enterprise procurement, but they no longer impact SmartScreen behavior. Paying a premium for EV solely to avoid SmartScreen warnings is no longer justified.
user3939382 5mo ago
> The user decides what code is allowed to run on their machines. Apparently Apple disagrees, Apple decides. Typical users aren’t going to find their hidden 5 step process to enable non-blessed apps and obviously they know that. Gatekeeper is an appropriate name considering the user themselves are on the outside of the gate. It’s the culimination of everything Stallman and the FSF warned everyone about for decades. By its logic we should install police officers in our living rooms for safety.
Zetaphor 5mo ago
This is not the developer choosing what software can run on their computer, this is Apple choosing for you and then you having to go disable protections (with what implications?) to then be able to choose what software you run. This has more to do with putting up a scary dialog for normies than it does protecting anyone. A non-technical user isn't going to go bypass this in the terminal, they're going to run back to the App Store where Apple can collect that sweet 30% and analytics.
kqp 5mo ago
> what do you actually want? Give me the ability to choose what I trust. “You can either trust Apple and nobody else, even yourself, or you can trust literally everybody” is obviously not a good faith implementation of this. Apple excels at steering the narrative with false conflation and false dichotomy, I’d also remind you of the came-and-went secure boot debate, which Apple successfully steered into Apple owns the encryption keys vs no encryption, and people just kind of forgot to ask, wait, why can’t I have the keys to my device?
- dangus 5mo ago
  I think you should read up on how secure boot works with macOS and alternate operating systems before speaking this negatively about the implementation. Apple is already giving you exactly what you’re asking for. It’s not really even that different than a PC motherboard that gives you “Windows UEFI” and “enroll my own keys” as options. https://asahilinux.org/docs/platform/security/ https://asahilinux.org/docs/platform/security/ As far as code signing, again, what do you want Apple to do here? They already gave you a master switch to turn it off. You are free to turn it off then implement your own third party code signing solution if you’d rather choose who you trust. It’s not Apple’s fault if nobody else decided to make their own trust repositories and the only alternative on the market is to have no safeguard at all. And let’s not forget who Apple markets their computers to. These features aren’t for you and me, they’re for the non-technical customers who will absolutely get pwned by unsigned code. Go to the MacBook Neo marketing page and try to find a single image of someone writing code or even being gainfully employed.
  - Nevermark 5mo ago
    This is that false dichotomy. You can turn off all protection, as you point out. So who Apple markets Neo's to isn't a factor. > Apple’s fault if nobody else decided to make their own trust repositories and the only alternative on the market is to have no safeguard at all. Does Apple provide a means for enabling third party trust systems, without disabling Apple's protections in general? If not, that is a serious problem of Apple's choosing. Nobody (to a first order approximation) want's to dispense with Apple's protection, or re-implement it, but to be able to carve out exceptions for specific classes of software.
newman314 5mo ago
I do not think this is the right way. The right way would be for Apple to allow for a free Developer ID for distribution if the app is free and has no in-app purchases. This provides IMO all-around goodwill while still adhering to good release practices.
- jorisw 5mo ago
  Or maybe lower the price to $1. _Some_ barrier of entry I think is needed (and intended) to stop everyone and their mother from creating developer accounts. I don’t think Apple needs or cares about the $99
chr15m 5mo ago
> what do you actually want? To make gatekeeper happy without paying a large amount of money and own Apple hardware (same thing).
randyrand 5mo ago
> what do you actually want? A UI option would make sense. That is what most users are comfortable with.
vor_ 5mo ago
> what do you actually want? I want to be able to right-click on an app and choose "Open" to run the program with an authentication dialog. You used to be able to do this, but Apple removed it in favor of an incredibly annoying process of having to go into System Settings every time.
- Wowfunhappy 5mo ago
  ...I guess I just don't understand why this makes such a big difference to you versus having Gatekeeper off? You're asking for a very specific flow, where you can run anything but only if you right click the app instead of double clicking the app.
elisbce 5mo ago
If you want to take the risk and install some unsigned software on your machine, go ahead, but don't blame Apple, who is gatekeeping for the entire ecosystem for making the decision to keep the restrictions in place so that the other 2.5 billion users don't fall victims to malware defenselessly. Also, as a rule of thumb in cybersecurity, never underestimate human flaws or overestimate your ability to overcome them. Even the most brilliant experts cannot possibly know everything and make zero mistakes, let alone "the users" you are talking about. It is pure illusion that "the users" know exactly what's running on their machine under the hood. We should be thankful that Apple is willing to hold the lines and go this far to tighten security up when nobody forces them to. It is probably one of the best thing coming out of Jobs' relentless push for privacy and security on the iPhone.
matheusmoreira 5mo ago
> Any user who does not like Gatekeeper can turn it off on their machine in ten seconds by running this in a Terminal For now. Enjoy it while it lasts.
eviks 5mo ago
> Pick one, you obviously can’t have both! Obviously you can, and you actually could earlier where you could click a bypass button for a specific app without any of this terminal nonsense > turn it off on their machine in ten seconds You forgot to add the time to learn that it's possible and to find the right command > So maybe it takes 30 seconds instead of ten seconds. That’s mildly more annoying, but still doesn’t really seem like a big deal to me. That's because you keep ignoring the actual effort/cost even after you've learned your first simplistic estimate was a mistake
kokada 5mo ago
> but then, like, what do you actually want? As an author of some homebrewed Go software in the past and trying to distribute in all 3 big OSes, I completely understand the blog post author's points. The problem is not Gatekeeper per see, it is just the combination of things that makes everything infuriating: - I could justify going for the whole "Apple Developer Program" even with all the bullshit things you need to do to get certified if this was a one time payment like in Google Play Store. But it is yearly. Like the author, I would probably get 0 (or close to 0) dollars in recurrent revenue for those apps, I could justify a one time payment but a yearly one is ridiculous, it is not like Apple needs this money to be profitable (they probably get a much higher margins on selling things on Apple Store) - Gatekeeper UX is infuriating. The equivalent on Windows (SmartScreen, as the author also cited) is still basically the same as Gatekeeper as far I understand (e.g., you need to have a valid certificate on your app or SmartScreen will deny the app execution until you clear the safety bit). But SmartScreen, different from Gatekeeper, has an actual good UX, as the error messages are clear and actionable (and also don't require a command line command to bypass) - The author was still in a more "happy path" than me since their app seems to be a CLI only app. In this case just removing the quarantine bit with `xattr` works fine. In my case I was trying to distribute a desktop app, and I needed some special permissions to show notifications. This means I need to package my app in a proper `.app` bundle, include the required XML requesting the permissions and I am now required to sign the app. And since I am required to sign my app, I either pay the yearly payment fee to Apple to get a certificate to sign my app or I ask the users to resign the app with a self-signed certificate before launching So really, I don't want that much actually. I can definitely handle all bullshit Apple wants, but I want at least a cheaper way to develop apps in their ecossystem. Maybe a new basic certification program that you have a one time fee and you can sign your apps but not notarize them. That way Gatekeeper would still complain, but at least my app would work without resign. Or limit notarization to X amount of users (non-stabled notarized apps talks with Apple servers during the app first run, so they could just limit the amount of allowed tickets to X amount of users). If my app ever pass X amount of users, I will gladly pay the Apple tax, but 99USD/year for something that I will never see it back is too much. Edit: BTW, I know, maybe 99USD/year doesn't seem too much for some. But Apple also doesn't do any regional pricing as far I know, and 99USD/year is crazy expensive in the country where I come from for example. Edit 2: I am sure things are better nowadays with Claude/ChatGPT, but also trying to understand how to do the correct thing for your app is very difficult, especially if you're not using Xcode, since Apple assumes you're using it so all documentation refers to Xcode.
deleted 5mo ago
[deleted]
johnofthesea 5mo ago
I just wish Homebrew was not planning to remove packages because of this. > $ brew doctor > Warning: Some installed casks are deprecated or disabled. You should find replacements for the following casks: > alacritty > librecad Is there workaround? Probably. But macos lost benefit of OS X's "it just works". Time to move elsewhere I guess.
- Wowfunhappy 5mo ago
  Yeah, I think this is a terrible decision on Homebrew's part. Lots of people said that to the Homebrew maintainers and they refused to budge.
gblargg 5mo ago
> People will say, no, that’s too big a hammer, it’s not safe… but then, like, what do you actually want? Either you keep Gatekeeper because you like the friction it introduces, or you don’t like that friction and you should go turn it off. Pick one, you obviously can’t have both! Refusing to let you open an app isn't friction, it's complete obstruction. How about warning you and letting you run it this one time or allow it to run normally from there on?
- Wowfunhappy 5mo ago
  You can still open unsigned apps with Gatekeeper on, you have to go into Settings to whitelist it. I find this extremely annoying, but as I said, that's the point of Gatekeeper, if you don't like it then turn Gatekeeper off.

wetpaws 5mo ago

[dead]

novafunc 5mo ago

Rather than just having the options "Done" and "Move to Bin", give me an option to actually run it without having to manually go into System Settings each and every time without disabling security features? The added friction feels more like a way to force developers to pay Apple an annual fee for distributing rather than for my safety. Not saying it doesn't help with safety, just that it's more weighed to the former.

Wowfunhappy 5mo ago
> without disabling security features? With Gatekeeper turned off, you’ll still get a warning on first launch which you can easily click through. (Unless Apple changed something in the last few versions—let me know if that’s the case—but it would be out of character for them to remove a warning...) The “security feature” you don’t want to disable is precisely the thing you are complaining about, so I don’t understand why you’d keep it around. > The added friction feels more like a way to force developers to pay Apple an annual fee for distributing rather than for my safety. I don’t imagine Apple makes a substantial amount of money from $99/year developer subscriptions. The App Store is another story of course.
- copperx 5mo ago
  > I don’t imagine Apple makes a substantial amount of money from $99/year developer subscriptions. The App Store is another story of course. It has a chilling effect on releasing free apps. It's going to be an interesting time soon, when even your dog will have a vibecoded app he'll want you to use.
  - Wowfunhappy 5mo ago
    I'm not saying it's good or that I like it, I just don't think Apple is doing it for the sake of developer subscription revenue, it's not enough revenue. (To be clear, my position is that most people should probably turn off Gatekeeper and then developers don't have to pay Apple anything, unless they're making very mainstream software which probably generates revenue anyway.)
- krackers 5mo ago
  > substantial amount of money from $99/year developer subscriptions You actually do get some value, you can file two DTS tickets [1] a year which are (supposedly) looked at by a real apple engineer. Assuming they haven't outsourced it, that feels worth about $100 considering how badly documented their APIs are. [1] https://developer.apple.com/support/technical/ https://developer.apple.com/support/technical/
  - enos_feedler 5mo ago
    It also gives you the option of entry into the WWDC lottery for a chance at 2 days at Apple Park. Good networking, food and vibes.
plufz 5mo ago
I also have things I want to change in gatekeeper, but that feature is not one of them. Just gut feeling but I would say 110% of all users, would just click ”start” on every unsigned app if it was that easy.
- Affric 5mo ago
  Bingo. I know I would. I am the king of knowing immediately when I have fucked up. “Undo” has made us far too comfortable with mistakes.
- weaksauce 5mo ago
  they could do it like they do it for accessibility settings. you have to opt in for an app and you need to know damn well if it is a reputable app before giving those controls over. there's enough friction in that that it is not done by many apps but not hard enough that it's a huge ask to whitelist the app.
- gblargg 5mo ago
  So have a buried option that power users can flip one time to add an allow button to opening untrusted apps.
  - Wowfunhappy 5mo ago
    But that's exactly what `sudo spctl --master-disable` does! You'll still see a warning dialog on first launch.
    - hedora 5mo ago
      That’s good to know, but the spelling of the command is incredibly user hostile, even by modern apple standards.
      - Wowfunhappy 5mo ago
        > the spelling of the command is incredibly user hostile Well the command is spctl, so I assume it stands for (s) Security (p) Policy (ctl) Control. I agree that "ctl" for "control" is a bit weird but it's a pretty typical Unix convention: pfctl, networkctl, systemctl, etc.
ceejayoz 5mo ago
> give me an option to actually run it without having to manually go into System Settings each and every time without disabling security features? People reflexively hit yes to these things.
- mrbombastic 5mo ago
  Just make it a semi-hidden multistep option like browsers when you visit a site with a bad cert, just annoying to leave what you are doing go to system settings and fiddle.
  - ceejayoz 5mo ago
    I mean, that's basically what it is.
- dml2135 5mo ago
  At what point does optimizing the experience for those who refuse to read or think stop making sense?
  - simonask 5mo ago
    That never stops making sense. People are trying to get things done, and will choose the fastest path, and their context is that they are constantly bombarded with popups, cookie banners, two-factor prompts, captchas, and a zillion other things. They have neither the time nor the resources to distinguish what’s important and requires their attention from what doesn’t. Most people find using a computer absolutely exhausting.
Barbing 5mo ago
Posit it saves a decent number of folks who are unable to follow the scammer’s necessary instructions: “Press command space, no no hold down the command key - gosh it’s in the bottom left - okay, now type “privacy”, now scroll, no you scrolled too far …”
- suzzer99 5mo ago
  Lol I would love to see a scammer try to get my mom or dad to do anything other than press the power button. He's in for a world of hurt. The other day my mom got a text saying she had a $399 charge on Apple, and to call the number if it wasn't her. So she called, because of course, why wouldn't you? Apparently the scammer finally got frustrated and hung up on her because she couldn't understand his accent.
  - Barbing 5mo ago
    :D Does your mother by chance happen to bear a striking resemblance to Kitboga?
ProllyInfamous 5mo ago
>give me an option to actually run it without having to manually go into System Settings I've run several PiHoles for several years, primarily on latest versions (up to v5; current is v6.4.x) – recently updating to v6 has been extremely frustrating [0], e.g: realizing that even when you tell the pi's/en0 ("internet") interface to use a specific DNS server (in GUI/network settings), it still uses the DNS-server recommended by your local DHCP server [1]. [0] I am aware that this is a joint-issue between RaspbianOS and Pi-Hole teams [1] which requires TWO sudo nmcli which newbs have no business configuring – what happened to -simple- ? ---- If you ever want to consider how crazy DNS-capture is getting, realize that Firefox/&c are all dark-patterning the abilities to turn off "secure"-DNS. The latest Raspian/Pi-Hole defaults are terrifying... [2] [2] another example: why doesn't v6 enable HTTPS localhost web-access, by default (like all previous versions?!)? Do the developers really expect us commoners to know how to generate localhost certificates – this is obviously behavior due to how the pihole useraccount behaves differently then the previously-root-blessed v5-behavior ---- Thankfully, I've kept a local copy of my favorite distro of Pihole v5, and it is readily-cloneable. When I attempted to pass a --version tag during a freshinstall (requesting v5 from remote installer), it went ahead and installed latest v6 (so why even.?!).
krackers 5mo ago
I remember you used to be able to right-click and then press open instead of double-clicking which would bypass gatekeeper just for that run. Not sure if it still exists though, I don't have any unsigned apps handy to test.
- odo1242 5mo ago
  They removed it
efficax 5mo ago
adding a button means osascript driven malware could approve itself and you might not even see it happen
- Wowfunhappy 5mo ago
  Hmm, I don't think that's true. How is the osascript running without getting past Gatekeeper itself? Also, how is it using UI control without TCC approval?

ryandrake 5mo ago

10 seconds or 30 seconds, it's just too much friction to ask end users to do. I actually develop on a Mac, but I've written off Apple as a target system for hobby/open source projects. Between quarantine, code signing, and notarizing (which requires $99 a year), it's just not worth it. Good for Apple users if they like this shit--I'm just not going to bother with distributing to the platform anymore. macOS is slowly getting like Windows, where, on a fresh install you have to go through and turn off all sorts of unwanted software just to have a sane environment where you, the user, are actually controlling your computer.

seam_carver 5mo ago
Isn't code signing even harder/more expensive on Windows?
- kivle 5mo ago
  Well, you can still run unsigned software (by clicking through to a bit of a hidden option in the popup dialog), and they also even remove that through "reputation" if enough people approve said binary (exact bitwise binary, so every new version released will go through the same issue).
- GeekyBear 5mo ago
  The extended validation code signing certificate you need to avoid having your installer blocked by Windows SmartScreen is quite a bit more expensive. https://stackoverflow.com/questions/48946680/how-to-avoid-the-windows-defender-smartscreen-prevented-an-unrecognized-app-fro https://stackoverflow.com/questions/48946680/how-to-avoid-th...
  - hermitcrab 5mo ago
    IIRC it also doesn't stop the Smartscreen warning appearing.
  - electroly 5mo ago
    This changed a couple years ago. EV certificates no longer get a free pass. https://learn.microsoft.com/en-us/windows/apps/package-and-deploy/smartscreen-reputation https://learn.microsoft.com/en-us/windows/apps/package-and-d... > EV certificates no longer bypass SmartScreen. Years ago, signing files with an Extended Validation (EV) code signing certificate would result in positive SmartScreen reputation by default, but this behavior no longer exists. EV certificates may matter for enterprise procurement, but they no longer impact SmartScreen behavior. Paying a premium for EV solely to avoid SmartScreen warnings is no longer justified.

user3939382 5mo ago

> The user decides what code is allowed to run on their machines. Apparently Apple disagrees, Apple decides. Typical users aren’t going to find their hidden 5 step process to enable non-blessed apps and obviously they know that. Gatekeeper is an appropriate name considering the user themselves are on the outside of the gate. It’s the culimination of everything Stallman and the FSF warned everyone about for decades. By its logic we should install police officers in our living rooms for safety.

Zetaphor 5mo ago

This is not the developer choosing what software can run on their computer, this is Apple choosing for you and then you having to go disable protections (with what implications?) to then be able to choose what software you run. This has more to do with putting up a scary dialog for normies than it does protecting anyone. A non-technical user isn't going to go bypass this in the terminal, they're going to run back to the App Store where Apple can collect that sweet 30% and analytics.

kqp 5mo ago

> what do you actually want? Give me the ability to choose what I trust. “You can either trust Apple and nobody else, even yourself, or you can trust literally everybody” is obviously not a good faith implementation of this. Apple excels at steering the narrative with false conflation and false dichotomy, I’d also remind you of the came-and-went secure boot debate, which Apple successfully steered into Apple owns the encryption keys vs no encryption, and people just kind of forgot to ask, wait, why can’t I have the keys to my device?

dangus 5mo ago
I think you should read up on how secure boot works with macOS and alternate operating systems before speaking this negatively about the implementation. Apple is already giving you exactly what you’re asking for. It’s not really even that different than a PC motherboard that gives you “Windows UEFI” and “enroll my own keys” as options. https://asahilinux.org/docs/platform/security/ https://asahilinux.org/docs/platform/security/ As far as code signing, again, what do you want Apple to do here? They already gave you a master switch to turn it off. You are free to turn it off then implement your own third party code signing solution if you’d rather choose who you trust. It’s not Apple’s fault if nobody else decided to make their own trust repositories and the only alternative on the market is to have no safeguard at all. And let’s not forget who Apple markets their computers to. These features aren’t for you and me, they’re for the non-technical customers who will absolutely get pwned by unsigned code. Go to the MacBook Neo marketing page and try to find a single image of someone writing code or even being gainfully employed.
- Nevermark 5mo ago
  This is that false dichotomy. You can turn off all protection, as you point out. So who Apple markets Neo's to isn't a factor. > Apple’s fault if nobody else decided to make their own trust repositories and the only alternative on the market is to have no safeguard at all. Does Apple provide a means for enabling third party trust systems, without disabling Apple's protections in general? If not, that is a serious problem of Apple's choosing. Nobody (to a first order approximation) want's to dispense with Apple's protection, or re-implement it, but to be able to carve out exceptions for specific classes of software.

newman314 5mo ago

I do not think this is the right way. The right way would be for Apple to allow for a free Developer ID for distribution if the app is free and has no in-app purchases. This provides IMO all-around goodwill while still adhering to good release practices.

jorisw 5mo ago
Or maybe lower the price to $1. _Some_ barrier of entry I think is needed (and intended) to stop everyone and their mother from creating developer accounts. I don’t think Apple needs or cares about the $99

chr15m 5mo ago

> what do you actually want? To make gatekeeper happy without paying a large amount of money and own Apple hardware (same thing).

randyrand 5mo ago

> what do you actually want? A UI option would make sense. That is what most users are comfortable with.

vor_ 5mo ago

> what do you actually want? I want to be able to right-click on an app and choose "Open" to run the program with an authentication dialog. You used to be able to do this, but Apple removed it in favor of an incredibly annoying process of having to go into System Settings every time.

Wowfunhappy 5mo ago
...I guess I just don't understand why this makes such a big difference to you versus having Gatekeeper off? You're asking for a very specific flow, where you can run anything but only if you right click the app instead of double clicking the app.

elisbce 5mo ago

If you want to take the risk and install some unsigned software on your machine, go ahead, but don't blame Apple, who is gatekeeping for the entire ecosystem for making the decision to keep the restrictions in place so that the other 2.5 billion users don't fall victims to malware defenselessly. Also, as a rule of thumb in cybersecurity, never underestimate human flaws or overestimate your ability to overcome them. Even the most brilliant experts cannot possibly know everything and make zero mistakes, let alone "the users" you are talking about. It is pure illusion that "the users" know exactly what's running on their machine under the hood. We should be thankful that Apple is willing to hold the lines and go this far to tighten security up when nobody forces them to. It is probably one of the best thing coming out of Jobs' relentless push for privacy and security on the iPhone.

matheusmoreira 5mo ago

> Any user who does not like Gatekeeper can turn it off on their machine in ten seconds by running this in a Terminal For now. Enjoy it while it lasts.

eviks 5mo ago

> Pick one, you obviously can’t have both! Obviously you can, and you actually could earlier where you could click a bypass button for a specific app without any of this terminal nonsense > turn it off on their machine in ten seconds You forgot to add the time to learn that it's possible and to find the right command > So maybe it takes 30 seconds instead of ten seconds. That’s mildly more annoying, but still doesn’t really seem like a big deal to me. That's because you keep ignoring the actual effort/cost even after you've learned your first simplistic estimate was a mistake

kokada 5mo ago

> but then, like, what do you actually want? As an author of some homebrewed Go software in the past and trying to distribute in all 3 big OSes, I completely understand the blog post author's points. The problem is not Gatekeeper per see, it is just the combination of things that makes everything infuriating: - I could justify going for the whole "Apple Developer Program" even with all the bullshit things you need to do to get certified if this was a one time payment like in Google Play Store. But it is yearly. Like the author, I would probably get 0 (or close to 0) dollars in recurrent revenue for those apps, I could justify a one time payment but a yearly one is ridiculous, it is not like Apple needs this money to be profitable (they probably get a much higher margins on selling things on Apple Store) - Gatekeeper UX is infuriating. The equivalent on Windows (SmartScreen, as the author also cited) is still basically the same as Gatekeeper as far I understand (e.g., you need to have a valid certificate on your app or SmartScreen will deny the app execution until you clear the safety bit). But SmartScreen, different from Gatekeeper, has an actual good UX, as the error messages are clear and actionable (and also don't require a command line command to bypass) - The author was still in a more "happy path" than me since their app seems to be a CLI only app. In this case just removing the quarantine bit with `xattr` works fine. In my case I was trying to distribute a desktop app, and I needed some special permissions to show notifications. This means I need to package my app in a proper `.app` bundle, include the required XML requesting the permissions and I am now required to sign the app. And since I am required to sign my app, I either pay the yearly payment fee to Apple to get a certificate to sign my app or I ask the users to resign the app with a self-signed certificate before launching So really, I don't want that much actually. I can definitely handle all bullshit Apple wants, but I want at least a cheaper way to develop apps in their ecossystem. Maybe a new basic certification program that you have a one time fee and you can sign your apps but not notarize them. That way Gatekeeper would still complain, but at least my app would work without resign. Or limit notarization to X amount of users (non-stabled notarized apps talks with Apple servers during the app first run, so they could just limit the amount of allowed tickets to X amount of users). If my app ever pass X amount of users, I will gladly pay the Apple tax, but 99USD/year for something that I will never see it back is too much. Edit: BTW, I know, maybe 99USD/year doesn't seem too much for some. But Apple also doesn't do any regional pricing as far I know, and 99USD/year is crazy expensive in the country where I come from for example. Edit 2: I am sure things are better nowadays with Claude/ChatGPT, but also trying to understand how to do the correct thing for your app is very difficult, especially if you're not using Xcode, since Apple assumes you're using it so all documentation refers to Xcode.

deleted 5mo ago

[deleted]

johnofthesea 5mo ago

I just wish Homebrew was not planning to remove packages because of this. > $ brew doctor > Warning: Some installed casks are deprecated or disabled. You should find replacements for the following casks: > alacritty > librecad Is there workaround? Probably. But macos lost benefit of OS X's "it just works". Time to move elsewhere I guess.

Wowfunhappy 5mo ago
Yeah, I think this is a terrible decision on Homebrew's part. Lots of people said that to the Homebrew maintainers and they refused to budge.

gblargg 5mo ago

> People will say, no, that’s too big a hammer, it’s not safe… but then, like, what do you actually want? Either you keep Gatekeeper because you like the friction it introduces, or you don’t like that friction and you should go turn it off. Pick one, you obviously can’t have both! Refusing to let you open an app isn't friction, it's complete obstruction. How about warning you and letting you run it this one time or allow it to run normally from there on?

Wowfunhappy 5mo ago
You can still open unsigned apps with Gatekeeper on, you have to go into Settings to whitelist it. I find this extremely annoying, but as I said, that's the point of Gatekeeper, if you don't like it then turn Gatekeeper off.