Hacker News Reader

Comment by eridius | Hacker News Reader

It's unfortunate that there is an alleged 0day in this functionality. I don't know why the author is trying to accuse Apple of having the real goal of "wrestl[ing] control of the system away from it users". SKEL looks like a very good idea to me, and the presence of a bug does not make it any less of a good idea. It's also unclear in what way SKEL is supposed to be taking control away from Apple's users anyway. If anything, it's giving control to the users, because the users now get approval power over any KEXTs.

View on HN

Try making a change to the /usr filesystem, for example. It's very hard in recent versions of macOS. It sounds like this type of thing is going to be harder in the future, and that's what the GP is talking about, I believe.

When this first came out I had some troubles with it. I guess since then homebrew and others have caught up to the changes. It hasn't been a problem for many months.

It's part of an overall trend. For example the gatekeeper security settings ux has slowly been removing options to run unsigned binaries bit by bit.

In 10.12 there is no obvious way on how to run unsigned binaries now. When you double click on an app multiple times, it refuses to run. If you go to security settings you cannot run the unsigned binary from there. You have to right click on the app and press open to get the old dialog that would allow you to run an unsigned binary like it's some sort of easter egg. In older versions you didn't have these restrictions.

Right-click an app and select Open is always how you've been able to bypass Gatekeeper to run unsigned binaries. That hasn't changed.

AFAIK the only thing that's changed since Gatekeeper was introduced was the Security preferences lost the option to allow unsigned apps.

I've run several unsigned apps on Sierra and previous versions with Gatekeeper, and not once have I right-clicked an app to do it.

Did you ever configure Gatekeeper in Security settings to allow for unsigned apps? It's plausible that updating to Sierra would preserve that setting, though I haven't tried (as I never configured my system that way).

The biggest problems I have had with my Mac came from a kernel extension that I didn't know got installed, and didn't get uninstalled when I uninstalled the accompanying program.

Reply on news.ycombinator.com