| ▲ | xfactorial 6 hours ago | ||||||||||||||||||||||||||||||||||||||||
I think the idea is wonderful, but a not-audited application that uses things like the camera is a “no go” for me. Get it notorized and ask for some money! I will gladly pay it (and I hope others will do it as well). Awesome concept: ergonomics and/or posture monitoring is a market opportunity for heavy users. | |||||||||||||||||||||||||||||||||||||||||
| ▲ | alin23 6 hours ago | parent | next [-] | ||||||||||||||||||||||||||||||||||||||||
Notarization is mostly a glorified malware scan. There's no Apple engineer auditing what's being sent for notarization. Even clever malware can evade notarization scans and be distributed as a notarized binary, it has happened in the past [0] There's no better way for auditing such an app than having the code easily available and looking through it, and compiling it yourself. Which is already the case here. [0] https://thehackernews.com/2025/12/new-macsync-macos-stealer-... | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| ▲ | xpasky 6 hours ago | parent | prev | next [-] | ||||||||||||||||||||||||||||||||||||||||
It's literally a single .swift file. Ask your LLM to audit it. | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| ▲ | tjohnell 2 hours ago | parent | prev | next [-] | ||||||||||||||||||||||||||||||||||||||||
Posturr is now notarized! | |||||||||||||||||||||||||||||||||||||||||
| ▲ | wizzwizz4 6 hours ago | parent | prev | next [-] | ||||||||||||||||||||||||||||||||||||||||
While I disagree with you, thank you for sharing your decision-making process: you're probably not the only one who thinks this way. In general, would you pay for a notorised build of free software, if you had use for that software, even if an un-notorised build or the source code were available? | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| ▲ | tananaev 6 hours ago | parent | prev [-] | ||||||||||||||||||||||||||||||||||||||||
Are you serious? It's open source. And there's less than 1000 lines total. Get Codex or Claude to review it if you're paranoid. | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||