Depending on your app this is not all.

If i send a golang binary to someone with a mac via signal or other mediums, apple simply displays a dialog that the app is damaged and can't be run.

You need to use chmod to manually remove the quarantine flag to run it.

That for me is something that should be fined ad infinitum, because it is clearly designed to disallow non technical people to run custom apps.

▲

Zak 9 days ago | parent | next [-]

On the other hand, it used to be very common for malware on Windows to email itself to all your contacts using your real email client. It's probably reasonable for an OS to add a little friction to the process in the modern era, though it probably shouldn't lie and claim the binary is damaged when that's not the problem.

▲

makeitdouble 9 days ago | parent [-]

chmod to dequarantine doesn't sound like "a little friction" to me.

On your point about security, this kind of aggressivity from the platform owner tend to backfire.

The user was already convinced to open that mail, download that file, and try to run it. Pushing the process to the terminal just means your clueless users now run the provided incantations in the shell instead, and the attack vector now becomes huge (the initial program doesn't even need to be malware)

▲

Zak 9 days ago | parent [-]

I agree having to go to the command line is too much friction. Just clicking `overdue-invoice.doc.pif` is too little. About right is somewhere between a prompt and setting the file executable in the GUI.

	▲	makeitdouble 9 days ago \| parent [-]
		I wish it would run in a stricter sandboxed mode and prompt the user on the first network requests and file writes outside of it's directory. That wouldn't be perfect, but at least the user could be prompted for a concrete action instead of a vague "this script is scary" warning.

▲

bpye 9 days ago | parent | prev [-]

> If i send a golang binary to someone with a mac via signal or other mediums, apple simply displays a dialog that the app is damaged and can't be run.

Has this changed? I thought it failed to launch, but if you go to Privacy & Security in Settings it would give you the option to allow it to run?

Though yes, macOS doesn't prompt you to do that, you have to know where to find it.