4 ms·

Yeah, off of an open source repository on github that the community can inspect. But here you are being asked to trust a binary from some developer out there.

by abalone 13y ago

Yeah, off of an open source repository on github that the community can inspect. But here you are being asked to trust a binary from some developer out there. That's the reason Apple added this signing feature. I'm just wondering if there's really a good reason for a developer to not follow it.

vhost- 13y ago
>Yeah, off of an open source repository on github that the community can inspect. That doesn't make it better. What if your internet connection craps out while it's downloading the line "rm -rf /usr/local/bin/old-binary" and it happens to stop at "rm -rf /usr"? Oops.
- bennyg 13y ago
  Is it on a stream-and-run method of executing tasks? Surely it looks for an end-of-line or end-of-command terminator like "\n"
  - vhost- 13y ago
    Curl will still pipe partials: http://blog.existentialize.com/dont-pipe-to-your-shell.html http://blog.existentialize.com/dont-pipe-to-your-shell.html
    - bennyg 13y ago
      That's so sketch and dangerous.
- plorkyeran 13y ago
  This is trivially fixable by wrapping the body of the script in a function which is invoked at the end. Homebrew's install script doesn't do this, but it's written in Ruby and all of the side-effecting statements are within a single block, so the worst that could happen is it could fail to print the message telling you that it's installed at the end.
cenhyperion 13y ago
Of course if you'd looked at the web page you'd see that you can do exactly the same here. https://github.com/brunophilipe/Cakebrew/releases/tag/v1.0.2 https://github.com/brunophilipe/Cakebrew/releases/tag/v1.0.2
- abalone 13y ago
  Why so condescending? I looked at the web page. The binary download is from cakebrew.com, not GitHub. You have to trust cakebrew.com. Again, nobody has answered what the problem is with signing the installer. What gives?
  - autodidakto 13y ago
    You're saying that an Apple killswitch would be a good thing that users would want?
    - filmgirlcw 13y ago
      No, OP is saying installing an unsigned binary that is a package manager that has access to all of your system files is uncomfortable for some people. I'd gladly fork it and replace it with a signed binary, but I'd want to ensure there isn't anything suspect in the project. And seriously, I've never even heard of the kill switch being used for anything that wasn't malicious. Especially if it's not distorted in the Mac App Store.
    - abalone 13y ago
      Yes, it is definitely a good feature. It's part of their security architecture. They figured out a way to allow developers complete freedom in distributing their software directly / outside of the App Store while still offering users protection against malware. The point of the killswitch is to disable malicious software that someone tricked you into downloading off the internet and installing. That is the only thing it would be used for (and I'm not aware if it ever has.. maybe because it's a good deterrent). It is not the same as the broader App Store approval guidelines. This is specifically for disabling malware, e.g. a bad actor tricking 10% of Hacker News into installing a malicious fork of brew. I also want to make it clear I have no reason to believe this developer is anything but trustworthy. I just am curious why they decided not to sign it.

by abalone 13y ago

vhost- 13y ago

>Yeah, off of an open source repository on github that the community can inspect. That doesn't make it better. What if your internet connection craps out while it's downloading the line "rm -rf /usr/local/bin/old-binary" and it happens to stop at "rm -rf /usr"? Oops.

bennyg 13y ago
Is it on a stream-and-run method of executing tasks? Surely it looks for an end-of-line or end-of-command terminator like "\n"
- vhost- 13y ago
  Curl will still pipe partials: http://blog.existentialize.com/dont-pipe-to-your-shell.html http://blog.existentialize.com/dont-pipe-to-your-shell.html
  - bennyg 13y ago
    That's so sketch and dangerous.
plorkyeran 13y ago
This is trivially fixable by wrapping the body of the script in a function which is invoked at the end. Homebrew's install script doesn't do this, but it's written in Ruby and all of the side-effecting statements are within a single block, so the worst that could happen is it could fail to print the message telling you that it's installed at the end.

cenhyperion 13y ago

Of course if you'd looked at the web page you'd see that you can do exactly the same here. https://github.com/brunophilipe/Cakebrew/releases/tag/v1.0.2 https://github.com/brunophilipe/Cakebrew/releases/tag/v1.0.2

abalone 13y ago
Why so condescending? I looked at the web page. The binary download is from cakebrew.com, not GitHub. You have to trust cakebrew.com. Again, nobody has answered what the problem is with signing the installer. What gives?
- autodidakto 13y ago
  You're saying that an Apple killswitch would be a good thing that users would want?
  - filmgirlcw 13y ago
    No, OP is saying installing an unsigned binary that is a package manager that has access to all of your system files is uncomfortable for some people. I'd gladly fork it and replace it with a signed binary, but I'd want to ensure there isn't anything suspect in the project. And seriously, I've never even heard of the kill switch being used for anything that wasn't malicious. Especially if it's not distorted in the Mac App Store.
  - abalone 13y ago
    Yes, it is definitely a good feature. It's part of their security architecture. They figured out a way to allow developers complete freedom in distributing their software directly / outside of the App Store while still offering users protection against malware. The point of the killswitch is to disable malicious software that someone tricked you into downloading off the internet and installing. That is the only thing it would be used for (and I'm not aware if it ever has.. maybe because it's a good deterrent). It is not the same as the broader App Store approval guidelines. This is specifically for disabling malware, e.g. a bad actor tricking 10% of Hacker News into installing a malicious fork of brew. I also want to make it clear I have no reason to believe this developer is anything but trustworthy. I just am curious why they decided not to sign it.