Hacker News Reader

Comment by jordigh | Hacker News Reader

"Notarised", what a loaded, feel-good term.

I for one welcome our notarizing overlords. Running a terminal command to disable it is a very minor inconvenience for us nerds... in return we'll get fewer tedious house calls from family and friends asking why their computer is doing weird things.

I already posted it elsewhere but: on the other hand, people who have been doing this for a living will have less work to do! I know some people who live off those calls. :)

Don't worry, endlessly escalating software complexity will keep us all busy. I love current MacOS but my perception it's never been quite as bug-free as it was in the Snow Leopard era. And I attribute that to increasing complexity.

Part of me wishes that Apple would slow down the big innovation for a couple of years and get the entire development team working on bug-fixes and polish.

> And I attribute that to increasing complexity.

I attribute it to Apple focusing on iOS and letting their desktop products slide.

I don't know the intimate details of Windows SmartScreen, but aren't these basically the same thing? This seems to be a welcomed change while SmartScreen seems largely hated.

It's basically SmartScreen, and I think SmartScreen is great to have enabled by default for the same reason as the parent comment above.

Using the spctl disable command on the computers of unwary non-tech relatives is irresponsible. Your personal convenience is no excuse for increasing the attack surface of their computer and the risk that they could download and run malware without knowing any better.

I think he's talking about disabling it on his own Mac and the added security benefits of having it enabled on Macs used by normal users which benefit from the additional security.

It's not bad. It's better than various other terminology failures like the https padlock or secure boot. Since notarised is sufficiently boring, it will hopefully never mean anything other than an annoyance. At least for me, notarised clearly signals unnecessary paperwork. So it is faithful in that sense. I hope secure, certified, trusted etc. all change to notarised wherever applicable.

Yes. I am wondering what will happen when an app is submitted for notarisation and the app is in competition with an Apple created application. Will there be bias? Based on the stories I've read regarding App Store approvals and take-downs, it's a valid concern.

Notarization is an automated process. It's not a human-made review.

So I can add it to my CI that builds a new app several times a day and have my CI upload the noterized binary to github release like it does now?

Pretty much.

Seems appropriate to me, but what do you feel is loaded about it? I haven’t followed this too closely so I imagine there are plenty of nuances that I haven’t thought about.

Reply on news.ycombinator.com