←back to thread

Catalina is checking notarization of unsigned executables

(lapcatsoftware.com)
361 points robenkleene | 4 comments | 23 May 20 09:42 UTC | HN request time: 0s | source
Show context
MintelIE ◴[23 May 20 18:52 UTC] No.23285409[source]▶
Why don't companies come out and tell people what they're doing these days? Telemetry is getting to the point where people such as doctors and lawyers might be violating the law by using a modern computer. And people in the defense industry? Doesn't Apple employ thousands of forns? Who's audited their datasystems and ensured that this stuff stays private?

Much easier and better to just stop using it all and move to a system like Linux or BSD. 99% of people do everything in a browser these days anyhow.

replies(7): >>23285613 #>>23285939 #>>23286080 #>>23286398 #>>23286477 #>>23286788 #>>23287785 #
1. userbinator ◴[23 May 20 21:45 UTC] No.23286788[source]▶
I don't know about BSD, but even "mainstream" Linux (i.e. Ubuntu and the like) has telemetry now. This sort of spyware is everywhere. I think Windows 10 was the first to really normalise such behaviour on the desktop, and all the others just followed along.

where people such as doctors and lawyers might be violating the law by using a modern computer

That reminds me of a story I heard not long ago --- a company wanted to have more defense against malware, so signed up for a "security solution" from one of the big vendors and got it installed on all the company's machines. After a developer who was doing network tracing discovered that it was phoning home on every executable being run, and further digging discovered that it was periodically uploading file hashes and sometimes actual files --- not just the executables being run but other random files --- to the security vendor's servers, the reaction was "oh hell no!" and they immediately terminated the service and removed the product from all their machines.

replies(2): >>23288185 #>>23291274 #
2. ISL ◴[24 May 20 01:12 UTC] No.23288185[source]▶
Does Debian do any telemetry besides popcorn? I'd be real surprised.
replies(1): >>23291299 #
3. m463 ◴[24 May 20 13:16 UTC] No.23291274[source]▶
ubuntu has lots.

huge privacy settings pane with legalese, motd-news phones home, snapd continues to reinstall itself and use resources, whoopsie and kerneloops phone home. amazon app, apport, ubuntu-report, unattended-upgrades...

I haven't tried 20.04 yet, don't know if it is worse or better.

4. m463 ◴[24 May 20 13:19 UTC] No.23291299[source]▶
I haven't seen much with debian. they do updates and ntp pools but they are not for telemetry.

arch didn't seem to do anything.

heck, even pfsense phones home. Last I remember there was some data file it downloaded each time they used for metrics.

ubuntu phones home a lot.