Re: Sandboxing die.die.die

2012-08-22 Thread Derek Chesterfield
Gatekeeper uses the Quarantine mechanisms. Installer does not set the 
Quarantine flag, so the installed app does not trigger Gatekeeper. 

Basically if you have explicitly installed an app, you are expressing that you 
trust it. Or, expressed along the lines of the intent-driven model... I've 
installed this, I intend to execute it.  

On 23 Aug 2012, at 01:06, danchik  wrote:

> If the package is signed by Apple Developer's Installer certificate, gate 
> keeper does not complain (just askes to ok the installation) and then never 
> sais anything about the app that was installed (though it is NOT signed by 
> Apples Developer's Software certificate).
___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com


Re: Sandboxing die.die.die

2012-08-22 Thread Derek Chesterfield
They can *expect* that you will do the right thing. But they can't be expected 
to *know* that you really are. 

On 22 Aug 2012, at 16:52, Alex Zavatone  wrote:

> 
> On Aug 22, 2012, at 11:40 AM, Kyle Sluder wrote:
> 
>> On Aug 22, 2012, at 8:29 AM, Jayson Adams  wrote:
>> 
>>> 
>>> Ah, that explains why all of Apple's apps are sandboxed  Right.
>> 
>> The big ones are: Mail, Safari, Preview.
>> 
>> There have been legitimate problems with the rollout of sandboxing. It 
>> doesn't support certain interactions that are fundamental to some apps, and 
>> yet it was forced upon them by the MAS. Sandboxing errors are opaque, and 
>> code signing is cryptic.
>> 
>> But arguing against the basic premise of sandboxing is a fruitless endeavor. 
>> The user cannot and should not be forced to trust you to do the right thing.
>> 
>> --Kyle Sluder
> 
> Actually Kyle, when you're not catering to the mass market, but targeted 
> clients, the user requires you to do the right thing.  
> 
> ___
> 
> Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)
> 
> Please do not post admin requests or moderator comments to the list.
> Contact the moderators at cocoa-dev-admins(at)lists.apple.com
> 
> Help/Unsubscribe/Update your Subscription:
> https://lists.apple.com/mailman/options/cocoa-dev/dez%40mac.com
> 
> This email sent to d...@mac.com
___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com


Re: Constructive Criticism

2009-10-07 Thread Derek Chesterfield



On 6 Oct 2009, at 22:48, Alastair Houghton place.net> wrote:


Oh, and since I'm in the dot-syntax-is-evil camp, s/self.year/[self  
year]/g in Bill's code :-D :-D


Just an aside, but does either syntax got optimised by the compiler  
(GCC or LLVM). Obviously it can't in all cases, but this seems an  
obvious case where it could be replaced by an assignment. 
___


Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com


Re: Changes in KVO behavior on SL?

2009-09-02 Thread Derek Chesterfield


On 2 Sep 2009, at 13:47, Kevin Brock wrote:

Likewise, there's never been any guarantee that invoking - 
observeValueForKeyPath:ofObject:change:context: will provoke the  
receiver to call -valueForKeyPath: on the object whose property has  
changed.  If the observer wants, it can rely totally on the  
information in the change dictionary.  If you were using will/ 
didChange..., then KVO can be expected to invoke valueForKey: on  
the object whose property is changing, but that's not what (you  
say) you're doing.


Thanks.  That was helpful.  On 10.5 the receiver *does* apparently  
always call valueForKeyPath, at least with the receivers we're  
talking to.  Maybe they weren't checking the dictionary on 10.5, or  
were calling the fn if the data on the new values wasn't found in  
the dictionary, but are being stricter on 10.6.


Ken didn't contradict the behaviour you have observed. But you are  
[were] relying on a mechanism that is undocumented and quite possibly  
accidental on the part of Apple's engineers, and so could have changed  
at any time, or might have been erratic/fragile even on 10.5.


In other words, it is merely fortunate that your app ever worked on  
10.5, and not by design  ;-)
The documented pattern that Ken described should work on both 10.5 and  
10.6, and will always work... until deprecated anyway!

___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com


Re: ViewControllers and window nibs

2009-05-08 Thread Derek Chesterfield


On 6 May 2009, at 21:01, jonat...@mugginsoft.com wrote:


See the following for hints on binding across nibs.
http://homepage.mac.com/mmalc/CocoaExamples/controllers.html


I have a *vaguely* similar question: In IB, is it possible to connect  
an object in one NIB to an outlet in another NIB? Dragging a  
connection in IB across NIBs doesn't seem to work, so I suspect it is  
not possible??


PS: I know other solutions, e.g. code or bindings, but I am just  
wondering why I can't do it in IB...


Dez
___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com


Re: Which language to get started with cocoa development?

2009-01-05 Thread Derek Chesterfield
For an experienced C/C++ programmer, Obj-C is not difficult to learn  
at all. The main difference from C++ is the method-calling syntax.


The rest of what you need to learn for Obj-C development is the Cocoa  
framework itself, but since that's what you want to learn anyway, you  
will need to dive into that whichever language you choose.


I am not experienced in RubyCocoa, but I believe Leopard includes that  
with the OS. So you should be able to distribute RubyCocoa apps to  
Leopard users without bundling the framework.


On 31 Dec 2008, at 08:22, Achim Domma wrote:


Hi,

I develop software for a living and want to get started with cocoa  
development just for fun. I'm good at python, C, C++ and C# and have  
some Ruby knowledge. Now I'm asking myself, which language I should  
use to get started with cocoa development:


- ObjC looks interesing, but would be a new language to learn. I  
like to learn new languages, but I also prefer to do one step after  
another. So learning Cocoa and Obj-C toghether could be frustrating.
- I like dynamic scripting languages like python and ruby, but I  
would like to ship my apps to other users. And they should not care  
about the language I have used. Can pyObjC or RubyCoca be bundled  
with my app, so that the enduser will not recognize that python/ruby  
is shipped with my app?
- As far as I understand, GUIs are usually build with the interface  
builder of XCode. That tools is tuned to be used with ObjC. How good  
is the integration with scripting languages?
- How up to date are bindings to "non ObjC" languages usually? If I  
will like cocoa development, I want to have a look at core data and  
core animations. Are these also available for ruby and python?
- What about Mono/Cocoa#? Looks like Mono is not an good option, if  
I want to distribute my app as small download via the web. Or am I  
wrong?


I would be very happy to hear some opinions of experienced cocoa  
developers about these topics. Any feedback would be very appreciated.


cheers,
Achim
___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/dez%40mac.com

This email sent to d...@mac.com


___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com


Re: Wake up Reason

2008-12-10 Thread Derek Chesterfield

From my system.log:

Dec  1 08:20:49  kernel[0]: USB caused wake event (EHCI)

I assume different wake events are also logged.

On 10 Dec 2008, at 11:11, sheen mac wrote:


Is it possible to know the reason the MacBook wake from sleep?

___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]


Re: Opening Ports in Leopard

2008-11-17 Thread Derek Chesterfield

There shouldn't be anything to open.
The Leopard application firewall should automatically allow packets  
that are responding to your query.


On 17 Nov 2008, at 12:40, Gerriet M. Denkmann wrote:


I am trying to move a Cocoa app from Tiger to Leopard.
This program wants to send and receive on port 123 (Network Time  
Protocoll) but it never gets no answers on Leopard.
On TIger there was a firewall, where I could open port 123 in System  
Preferences.


How can I do this in Leopard?

___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]


Re: Why won't Gmail cooperate with authentication delegate methods? (Gmail RSS feeds do.)

2008-08-13 Thread Derek Chesterfield

On Wed, Aug 13, 2008 at 9:05 AM, Sumner Trammell
<[EMAIL PROTECTED]> wrote:


One can whip up a WebKit/Cocoa app, aim it at a Gmail URL like this:

https://www.google.com/accounts/ServiceLoginAuth?continue=http://mail.google.com/gmail&service=mail&Email=YOUR_LOGIN&Passwd=YOUR_PASSWORD&null=Sign+in

and get automatically logged into her Gmail account.  Pretty cool.

Even cooler, in my opinion, is implementing this delegate method:

- (void)webView:(WebView *)aSender
 resource:(id)anIdentifier
didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge  
*)aChallenge

fromDataSource:(WebDataSource *)aDataSource

So now, when you aim your app at the Gmail RSS feed URL:

https://mail.google.com/mail/feed/atom

you are authenticated automatically as well.

The second case has me wishing there were a special URL for the first
case that used standard authentication. (And thus would work with
authentication delegate methods.)

I tried the obvious, https://mail.google.com/mail, and that doesn't
work.  I'm still presented with the Gmail login form screen.

Does anyone know if a special URL exists for Gmail that uses standard
SSLv3 authentication like the Gmail RSS feed URL does?


Isn't this because the atom feed uses HTTP authentication, whereas  
the /mail URL uses a web form? I suspect that Google deliberately do  
not have a version of their webmail that uses HTTP auth. I think this  
is because HTTP auth has to re-send your login credentials with each  
HTTP request, and Google wanted to avoid that.

___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]


Re: Cocoa can be used to execute arbitrary (privileged) code !

2008-06-19 Thread Derek Chesterfield


On 20 Jun 2008, at 05:10, Jerry LeVan wrote:



On Jun 19, 2008, at 11:39 PM, Jens Alfke wrote:

It might not be a bad idea to proactively disarm this vulnerability  
on your own machine(s), as I just did:


	sudo chmod -s System/Library/CoreServices/RemoteManagement/ 
ARDAgent.app/ARDAgent


That turns off the setuid bit. I'm sure that'll break Remote  
Desktop functionality, but that's still preferable to having your  
machine pwned. (And it can be fixed by using Disk Utility to repair  
permissions.)


—Jens


I removed my user name from the "allow access from only these users"  
and the

hack quit working...

I added myself back in and turned on all of the options and the hack  
still

does not work...

I checked the ARDAgent executable and the  suid bit is still set.

Very Strange.


That 'fix' didn't work for me. Perhaps your ARDAgent process hasn't  
quit?


___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]


Re: WebView does not expose bindings in IB 3

2008-05-07 Thread Derek Chesterfield
Yes, but I was showing off to non-Mac-o-philes, so they hadn't seen  
anything like it before. It was a great way to show off some of the  
frills of Mac development, even if it is rather contrived [i.e. you'd  
still need to write code for your web browser eventually!]. But it  
certainly was a good way to get some people to sit up and finally take  
notice of the Mac - developer or not. And I'm sure you know, that once  
they are hooked, they keep coming back to ask more questions, and then  
it's just a matter of time before the take the plunge themselves.


On 7 May 2008, at 17:23, John Stiles wrote:

This was actually in a WWDC WebKit demo when WebKit was first  
announced—they set up a web browser on stage with no code, IIRC.


Derek Chesterfield wrote:


I used to love that I could show off to my mates that I could  
create a web browser in no time at all, and with zero lines of code!

___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]


Re: WebView does not expose bindings in IB 3

2008-05-07 Thread Derek Chesterfield
I don't think it's a bug. I think Apple just decided they didn't want  
to expose WebView with all the useful bindings.


I used to love that I could show off to my mates that I could create a  
web browser in no time at all, and with zero lines of code!


On 6 May 2008, at 23:19, Adam Radestock wrote:

I used to bind the "Animates" binding on the progress indicator to  
the "isLoading" binding using the Inspector in Interface Builder,  
but now the WebView doesn't show up as a valid binding target...


Is this a bug in IB, or am I missing something?

___

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]