• saigot@lemmy.ca
    link
    fedilink
    arrow-up
    1
    ·
    14 minutes ago

    By default windows does block unverified binaries. It’s pretty annoying. You have to click more info and then run anyway:

  • wander1236@sh.itjust.works
    link
    fedilink
    arrow-up
    6
    ·
    2 hours ago

    The macOS Gatekeeper quarantine is stupid, and Windows loves detecting random files as malware and deleting them while you’re using them and not restoring them even after you tell it to allow the “threat”.

    • Buddahriffic@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      17 seconds ago

      Though I do wonder how much of that “detects random files as malware” is actually detecting real malware hidden inside software that also does what it claims to do. Like “this removes game’s DRM and also installs a helpful little rootkit for if we need to help you debug something, DDOS websites we hate, or act as an annonymous proxy”.

  • Agent641@lemmy.world
    link
    fedilink
    arrow-up
    10
    ·
    9 hours ago

    I’ve never used a Mac, can you not just write your own app and run it?

    I do that on windows all the time.

    • Honytawk@discuss.tchncs.de
      link
      fedilink
      arrow-up
      13
      ·
      7 hours ago

      Apple blocks even apps that they define as “too old”.

      Like every new version of Macintosh forces every developer to scramble and update their app even though nothing needs to change just so Apple doesn’t block them.

      • Agent641@lemmy.world
        link
        fedilink
        arrow-up
        7
        ·
        6 hours ago

        That’s fucked. Normally I can coax just about any windows app to run on even windows 11, and I have to because sometimes I interact with ancient industrial machines with monolithic Configurator apps that need a serial connection and a bunch of weird custom commands that was last used in 1998. I’d be boned without them.

        • PieMePlenty@lemmy.world
          link
          fedilink
          arrow-up
          7
          ·
          6 hours ago

          Afaik, Microsoft made it a core principle to not break backward compatibility. Something that mattered to a lot of enterprise users. Applications made in Windows XP era, still work today on Win 11.

    • megopie@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      20
      ·
      edit-2
      9 hours ago

      You can run what ever you want, it doesn’t stop you outright, it just asks you a bunch of times and makes you jump through some hoops if the program isn’t from a verified source. It’s annoying for someone who knows what they’re doing, but arguably a good backstop to keep someone clueless from running something hostile. It’s a complicated enough process that someone who doesn’t know what they’re doing won’t be able to run it.

      Arguably it’s overkill and them trying to force users to stay in their closed “verified” garden, but it’s not totally unjustified.

      • mimavox@piefed.social
        link
        fedilink
        English
        arrow-up
        3
        ·
        3 hours ago

        For now, that is. Thing is that MacOS is on a trajectory where it becomes more and more locked down.

      • Bababasti@feddit.org
        link
        fedilink
        arrow-up
        2
        ·
        5 hours ago

        Pfff get outta here with your differentiated opinions, weighing pros and cons and all that mumbo jumbo. macOS bad!!11

  • 18107@aussie.zone
    link
    fedilink
    English
    arrow-up
    152
    arrow-down
    1
    ·
    19 hours ago

    I wrote a program (not a virus) on my computer. Windows deleted the exe immediately after I compiled it because it was “an unverified application from an unknown source”.

    It didn’t bother deleting the batch script I downloaded from an email that would delete all files if run. Apparently that one was fine.

    • Honytawk@discuss.tchncs.de
      link
      fedilink
      arrow-up
      1
      ·
      7 hours ago

      You mean it was flagged as malware? You must have written something that was deemed very suspicious. Or it is one of the few false positives.

      Also, that batch script would be flagged the moment it ran.

      • 18107@aussie.zone
        link
        fedilink
        English
        arrow-up
        1
        ·
        7 hours ago

        The exe was flagged immediately, even before running. I did not feel like running the batch script to be certain.

        The exe had absolutely nothing harmful. It didn’t interact with any files or do anything with drivers. It was entirely self contained.
        I don’t remember exactly what it was, but it can’t have been any more complicated than a game of snake in a terminal.

        • Axolotl@feddit.it
          link
          fedilink
          arrow-up
          1
          ·
          6 hours ago

          If it does requests to a website it can be flagged too, i was doing a web scrapper for some sites, since i had to test it, i runned it often while developing, windows decided to delete the exe

    • pivot_root@lemmy.world
      link
      fedilink
      arrow-up
      18
      ·
      16 hours ago

      What language was it written in? I read that Microsoft Defender likes to flag the baked-in runtime of some languages as malware because they commonly shows up in actual nalware.

        • pivot_root@lemmy.world
          link
          fedilink
          arrow-up
          13
          ·
          16 hours ago

          That is incredibly ironic.

          It relies on the .NET runtime already existing on the system, so it can’t even be excused as a false positive mistaking an embedded language runtime as malware.

      • luciferofastora@feddit.org
        link
        fedilink
        arrow-up
        2
        ·
        10 hours ago

        My mom is a verified source too, but that doesn’t mean I should be trusted not to break your PC…

        (By which I mean formatting the disc and installing Mint. The data loss is your fault, really, for not having backups.)

  • 4am@lemmy.zip
    link
    fedilink
    arrow-up
    57
    arrow-down
    2
    ·
    17 hours ago

    I can tell this meme is old because windows does the same shit MacOS does now and has been since at least Windows 10

    • 9point6@lemmy.world
      link
      fedilink
      arrow-up
      35
      ·
      edit-2
      16 hours ago

      Nah I use both pretty regularly and I’m fairly sure macOS still makes you do the “nope sorry, press ok, go into system settings, security panel, become admin and click trust this unknown publisher” thing

      Windows still just does the same safescreen thing they’ve been doing for ages now: “windows stopped this unknown thing from running, wanna run it anyway?”

      • Trainguyrom@reddthat.com
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 hours ago

        It’s extra fun when you’ve inserted a 30 year old install CD and Defender gets all up in arms because the developer/distributor dared to not register their signing key with Windows defender in 1998

      • freely1333@reddthat.com
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        1
        ·
        13 hours ago

        Actually worse - you don’t do it in the system settings anymore. You have to run a terminal command to dequarantine it. On windows you just have to click see more and accept the risk (or similar). Mac made it way more painful with no prompt to even show you how to do it - and it sort of acts like the app is broken rather than telling you it’s even a security protection.

        • Anivia@feddit.org
          link
          fedilink
          arrow-up
          3
          ·
          6 hours ago

          Can I get a source for that? Because I daily drive MacOS, am on the latest version, and it absolutely doesn’t behave like that for me

          • anomnom@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            4 hours ago

            The de-quarantine thing is for warez (we need this back), binaries that have been changed after signing.

            Unsigned or self signed apps make you go to the control panel, unlock and click “open anyway” and have since Gatekeeper was introduced. But you can also run spctl and mess with app or blanket settings in the command line.

      • REDACTED@infosec.pub
        link
        fedilink
        arrow-up
        4
        arrow-down
        3
        ·
        14 hours ago

        Nah I use both pretty regularly and I’m fairly sure macOS still makes you do the “nope sorry, press ok, go into system settings, security panel, become admin and click trust this unknown publisher” thing

        Just like I have to go into windows defender settings and add exclusions (trust) to anything it deems suspicious

        • Honytawk@discuss.tchncs.de
          link
          fedilink
          arrow-up
          5
          ·
          7 hours ago

          That is only when it was flagged as malware.

          Defender is usually really great at defining malware and has little false positives. So you better watch out if you have to de-quarantine it.

  • Sanctus@anarchist.nexus
    link
    fedilink
    English
    arrow-up
    66
    arrow-down
    1
    ·
    19 hours ago

    WINDOWS PROTECTED YOUR COMPUTER 🍑

    We have detected 🍆 and unverified app attempting to run on our your device and stopped it.

    • Matriks404@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      6 hours ago

      Linux works great as long as the regular user doesn’t have root rights. In my opinion if you install Linux on your family’s or friends’ devices, you never give the root rights, unless you want them to eventually break their system, and you will need to be an administrator for their systems.

      Okay another option are immutable distros I guess, but you still can fuck them up easily (probably).

      • chatokun@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        1
        ·
        4 hours ago

        Honestly similar things can be said of windows systems, though there are some exploits that get through. Most do rely on the person launching having admin rights.

    • Honytawk@discuss.tchncs.de
      link
      fedilink
      arrow-up
      3
      arrow-down
      1
      ·
      7 hours ago

      Which would cause major problems for regular users. They need to be protected from themselves.

      It is one of the biggest reasons why Linux is not ready for mainstream in its current form.

      • Koarnine@pawb.social
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        edit-2
        6 hours ago

        Lmao this is foolish, what about Bazzite and other immutable distributions, wouldn’t they then be more ready for mainstream than windows and mac os?

        Since it’s impossible to modify (and therefore break) the underlying system…

      • Snot Flickerman@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        11
        ·
        edit-2
        19 hours ago

        The way macOS handles it is literally just exactly how Linux handles it. Makes sense considering macOS is certified UNIX and Linux is technically a re-implementation of UNIX.

        This meme is conflating iOS and macOS as the same thing, which they certainly are not.

        • pivot_root@lemmy.world
          link
          fedilink
          arrow-up
          10
          ·
          16 hours ago

          It’s not. They both expose a POSIX API and userspace, but the underlying architecture is very different. macOS is in part based on the Mach microkernel, and creating a process has a bunch of work related to that.

          Even ignoring that difference, macOS has built-in signature checking that suspends a newly-started process the first time its executable is seen.

        • Boomer Humor Doomergod@lemmy.world
          link
          fedilink
          English
          arrow-up
          17
          ·
          19 hours ago

          Well…

          If you want to run a desktop app you need to have it signed or jump through a few minor hoops to grant it permission. (Go to system settings, authenticate, allow it, then right-click and select “Open”)

          But it’s not like it’s impossible.

        • TheTechnician27@lemmy.world
          link
          fedilink
          English
          arrow-up
          18
          arrow-down
          7
          ·
          edit-2
          17 hours ago

          Yeah, I remember when I tried to run an app on Linux, and it popped up and said: “Oops, the developer of this app you downloaded from the web hasn’t paid $100/year in protection money for verification. Guess you’ll have to navigate into your settings and allow running unverified apps for no reason which normal users with poor tech literacy will find burdensome or scary (and have to look up if and how they can do this, because the only options presented on the popup are ‘Move to Trash’ or ‘Cancel’).”

          You don’t have to defend Apple’s obvious protection racket grift.


          Damn, maybe some people don’t know that none of this is hyperbole – or just really love denying reality and slurping down the dick of their favorite multitrillion-dollar corporation’s OS. You cannot claim it’s “just like Linux” when Apple steps in as a middleman to extort developers out of money. Below is what happens to your app when you don’t pay Apple a ransom of $99/year (that’s $100 for all intents and purposes, and I’m going to call it as much instead of playing along with the old-as-dirt ‘99’ psychological trick).

          Pop-up with the option to 'Move to Trash' or 'Cancel' which reads (with a large, triangular, yellow exclamation symbol indicating caution): "'Example App' cannot be opened because the developer cannot be verified. macOS cannot verify that this app is free from malware. Safari downloaded this file on October 23, 2020."

          • turtlesareneat@piefed.ca
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            5
            ·
            15 hours ago

            You can certainly compile and run your own apps, you need to pay the developer fee if you want to distribute the software to other people’s Macs or iOS, or use advanced features like iCloud integration or push messages.

            • luciferofastora@feddit.org
              link
              fedilink
              arrow-up
              5
              ·
              10 hours ago

              I think you missed the part where the common user won’t activate the scary feature that allows them to run arbitrary apps. You, as a dev, are in the minority. The point is that you could make a great app almost nobody would (be able to) use because you didn’t pay Apple to let them run it.

              And push messages being an advanced feature is wild.

    • Telodzrum@lemmy.world
      link
      fedilink
      arrow-up
      6
      arrow-down
      4
      ·
      18 hours ago

      Most proper on here don’t know the difference between MacOS and iOS, which makes them actually like the caricature of Apple users they mock.

  • hperrin@lemmy.ca
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    3
    ·
    edit-2
    13 hours ago

    This is so dumb. Of course you can run an app coded by your friend. Either your friend can pay $100 a year to notarize their app, or you can pay $100 a year to run his app as a developer. Couldn’t be easier.

    Edit: apparently I need to add /s. I figured this was a stupid enough take that it was obvious.

    • SkunkWorkz@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      9 hours ago

      At least it’s just a $100 on Windows you pay $800 a year to the certification mafia to get your code signed and get rid of the warning.

    • pivot_root@lemmy.world
      link
      fedilink
      arrow-up
      5
      ·
      16 hours ago

      Either way, somebody pays Apple $10} a year. After paying them the equivalent of a kidney for the hardware. No thanks.