I suggested the approach, but I don't really support us facilitating the 
circumvention of a system security feature (or annoyance, based on your 
perspective). At the least, it shouldn't be considered Pd's "standard practice" 
for macOS, in my opinion.

Hypothetically, what if someone uploads a malicious external to deken, knowing 
that someone will blindly download, install, remove quarantine, and urn it? Is 
the onus partially on whoever wrote the plugin as well as the original actor?

I suppose another approach is to have an upload server that automatically signs 
the library contents of a zip file and creates a notarized dmg for deken using 
a "shared" Apple developer account. I feel this leads us to the same potential 
problem if it is truly open to whoever.

> On Oct 14, 2022, at 12:00 PM, pd-list-requ...@lists.iem.at wrote:
> 
> Message: 1
> Date: Thu, 13 Oct 2022 09:54:52 -0300
> From: Lucas Cordiviola <lucard...@hotmail.com <mailto:lucard...@hotmail.com>>
> To: Dan Wilcox <danomat...@gmail.com <mailto:danomat...@gmail.com>>, 
> Alexandre Torres Porres
>       <por...@gmail.com <mailto:por...@gmail.com>>
> Cc: Pd-List <pd-list@lists.iem.at <mailto:pd-list@lists.iem.at>>
> Subject: [PD] loading non notarized externals in newer macOS (was:
>       [hidraw] pre Deken release)
> Message-ID:
>       
> <ds7pr10mb4845b8566e81247519efed77a6...@ds7pr10mb4845.namprd10.prod.outlook.com
>  
> <mailto:ds7pr10mb4845b8566e81247519efed77a6...@ds7pr10mb4845.namprd10.prod.outlook.com>>
>       
> Content-Type: text/plain; charset=UTF-8; format=flowed
> 
> How about a tcl-plugin (available from deken) that is reusable instead 
> of a script per lib.
> 
> Something that you open and choose folder(s) to recursively circumvent 
> the quarantine in all binaries found. One has to provide the sudo 
> password in a pop-up dialog.
> 
> This plugin can also be part of deken or can be called by deken.

--------
Dan Wilcox
@danomatika <http://twitter.com/danomatika>
danomatika.com <http://danomatika.com/>
robotcowboy.com <http://robotcowboy.com/>



_______________________________________________
Pd-list@lists.iem.at mailing list
UNSUBSCRIBE and account-management -> 
https://lists.puredata.info/listinfo/pd-list

Reply via email to