Hacker News Reader

Comment by ChikkaChiChi | Hacker News Reader

Both Microsoft and Apple recently implemented similar 'Gatekeeper' software to scare people away from using or installing binaries that aren't from their blessed App Stores.

View on HN

Linux distros have had the run all your software from the 'app store' concept before Mac and Windows. The only difference is that Linux distros assume that all their users are more computer literate and know what they are doing when they install third party binaries. If you are writing a general purpose, mass market consumer OS, you want to clearly indicate to your user when they are doing something risky.

What are you talking about? I run Windows 8 at home and install non-App store software all the time.

Try running Minecraft. It's an unsigned binary so Windows "helps" you by hiding the 'Run Anyway' under the more info warning.

Given enough downloads that warning disappears. Basically it displays for unsigned executables with low download counts which may imply malware. It usually goes away after a few hours for moderately popular software.

And apparently notch can't afford a code signing certificate.

I just did. No warning.

By default, Gatekeeper only requires signing with an Apple-issued developer certificate, not distribution through the App Store, and even then only affects applications downloaded from the Internet through a Web browser or other application that intentionally sets specific extended attributes on downloaded files. Which, unless it wants to trigger these warnings, Steam would never do.

Unless I'm mistaken, (non-ARM) Windows works the same way, except Microsoft relies on third-party CAs to issue code-signing certificates (and, pedantically, NTFS calls extended attributes "alternative data streams").

Reply on news.ycombinator.com