Hacker News new | past | comments | ask | show | jobs | submit
cute_boi | on: Horible public key tricks
"the way, to sign a piece of software, you need to pay an extortive $100/year fee to Apple"

This is the main reason I hate these notarization. And the worst thing is if you want to work on some software that require network extension, you can't even do it without paying apple $99 a year. There are workaround like turning off SIP, but it isn't recommended.

frizlab | parent | next
Deactivating SIP is not that dangerous if you know what you’re doing. All it does it give back write access to root to some parts of the system.

Obviously, for the commoners, it is definitely not recommended, especially since they usually run random commands from stochastic engines w/o supervision… oh…… engineers do that too now? how in the hell???

I’m out.

traceroute66 | root | parent | next
> Deactivating SIP is not that dangerous if you know what you’re doing. All it does it give back write access to root to some parts of the system.

To be fair, given the increasingly sneaky cyber attacks these days, the more layers of security between you and root access the better IMHO. Turning off SIP in today's environment is a bit nuts as it is a genuinely sensible security layer.

loading story #50438573
loading story #50437235
JimDabell | root | parent
Not every conversation has to be a complaint about AI.
necovek | parent | next
Community approach basically failed in building a "web of trust" with all the PGP/GPG signing parties: both tools were tricky to use, integrating PGP/GPG signing into common tools (like email, word processors, web, but also version control systems like CVS, SVN, bzr, git...) was always lackluster.

LetsEncrypt is a surprising success, but it's still a centralized system running as a non-profit — which means that it's always at risk of not being funded and/or to be under influence of big sponsors. It also came too late, app stores were already centralized.

Obviously, enterprises prefer to be the one to gate the access, so with a situation as it was, they jumped on the opportunity.

LoganDark | parent | next
Apple won't even let you pay the fee in some cases. I've been fighting with them trying to figure out why they won't accept my ID verification since March. They keep saying my devices are linked to another Apple Account, but I purchased them all directly from the Apple Store and none of them have ever touched another account, so what the fuck.
RobotToaster | root | parent
You could try returning them, if apple say they were tampered with before you got them then apple will either have to accept the return or say apple are lying.
loading story #50438439
userbinator | parent
Not surprisingly "isn't recommended" by the ones who want you to pay them.