Most Mac developers know that the next OS X release is going to be out soon, and will introduce Gatekeeper, Apple's system to disallow running unsigned apps, at least by default. Pretty much like UAC on Windows.
I don't think this is a big deal since I assume a .component or .vst does not require it, but AFAIK installers or DMG do.
So, what's your opinion on this? I think it would be a good investment to pay for a Signed Developer ID, but a deal breaker is that I don't know if a signed PKG will keep asking for administrator password.
Thanks,
George
Mac OS X 10.8 Mountain Lion and Gatekeeper
-
- KVRAF
- 5632 posts since 18 Jul, 2002
-
- u-he
- 30192 posts since 8 Aug, 2002 from Berlin
We're going to sign both plug-in and installer.
The process seems very straight forward and works right out of XCode 4.3 - you aquire your private keys, which takes a few minutes, and then you can sign apps.
However, we haven't upgraded our projects to XCode 4 yet, so we haven't actually done a test run.
My thought is though that this could have a positive effect for us since cracks can only be run by users in the unsafe mode. If that drags two or so sales towards us every year, the 99 bucks were well spent.
The process seems very straight forward and works right out of XCode 4.3 - you aquire your private keys, which takes a few minutes, and then you can sign apps.
However, we haven't upgraded our projects to XCode 4 yet, so we haven't actually done a test run.
My thought is though that this could have a positive effect for us since cracks can only be run by users in the unsafe mode. If that drags two or so sales towards us every year, the 99 bucks were well spent.
-
- Beware the Quoth
- 35433 posts since 4 Sep, 2001 from R'lyeh Oceanic Amusement Park and Funfair
I presume you've read Chris Randall's take on this?george wrote:Most Mac developers know that the next OS X release is going to be out soon, and will introduce Gatekeeper, Apple's system to disallow running unsigned apps, at least by default. Pretty much like UAC on Windows.
I don't think this is a big deal since I assume a .component or .vst does not require it, but AFAIK installers or DMG do.
So, what's your opinion on this? I think it would be a good investment to pay for a Signed Developer ID, but a deal breaker is that I don't know if a signed PKG will keep asking for administrator password.
Thanks,
George
http://www.analogindustries.com/blog/en ... 6705207848
My take; basically yet another set of zero-content/zero-gain changes developers will have to make things continue to work on the Mac.
And pretty disconcerting implications for the future, too, if they lock it down any further (ie Mac Store software only... ever).
An idiot on Set Theory:
"In some cases there is an object called red that contains everything that is red. In much the same way a pot is a plate."
"In some cases there is an object called red that contains everything that is red. In much the same way a pot is a plate."
-
- KVRAF
- Topic Starter
- 5632 posts since 18 Jul, 2002
So a unsigned .component or .vst plug-ins won't run on 10.8?Urs wrote:My thought is though that this could have a positive effect for us since cracks can only be run by users in the unsafe mode. If that drags two or so sales towards us every year, the 99 bucks were well spent.
-
- Beware the Quoth
- 35433 posts since 4 Sep, 2001 from R'lyeh Oceanic Amusement Park and Funfair
Not unless the user switches off GK.george wrote:So a unsigned .component or .vst plug-ins won't run on 10.8?Urs wrote:My thought is though that this could have a positive effect for us since cracks can only be run by users in the unsafe mode. If that drags two or so sales towards us every year, the 99 bucks were well spent.
An idiot on Set Theory:
"In some cases there is an object called red that contains everything that is red. In much the same way a pot is a plate."
"In some cases there is an object called red that contains everything that is red. In much the same way a pot is a plate."
-
- KVRAF
- Topic Starter
- 5632 posts since 18 Jul, 2002
I just did. I'm fine if Apple allows signed developers and mac app store products by default.whyterabbyt wrote:I presume you've read Chris Randall's take on this?
But I still won't see the point if I do a signed PKG installer, a signed plug-in and the user needs to enter admin password because files are required to be placed at system wide locations.
-
- KVRian
- 882 posts since 24 Jun, 2002 from Berlin
Does anyone know if you will have to use Xcode4.3/Lion or if it is possible to sign the installer/dmg on the command line in snow leopard?
-
AdmiralQuality AdmiralQuality https://www.kvraudio.com/forum/memberlist.php?mode=viewprofile&u=83902
- Banned
- 6657 posts since 10 Oct, 2005 from Toronto, Canada
My understanding is there'll be a warning that it's unsigned. Then everybody will just do like they've been doing on Windows for years and ignore it.george wrote:So a unsigned .component or .vst plug-ins won't run on 10.8?Urs wrote:My thought is though that this could have a positive effect for us since cracks can only be run by users in the unsafe mode. If that drags two or so sales towards us every year, the 99 bucks were well spent.
If this is wrong, somebody please let me know.
And aside from the $100 (which I resent) I'm afraid of XCode4 because I keep hearing it doesn't work with old projects and has left out the audio API and examples. And can you even compile a plug-in with XCode4 that will run on any OS previous to Lion, or is that part of how they force change?
It's just disgusting.
-
- KVRAF
- Topic Starter
- 5632 posts since 18 Jul, 2002
Looks like it's not that easy.AdmiralQuality wrote: My understanding is there'll be a warning that it's unsigned. Then everybody will just do like they've been doing on Windows for years and ignore it.
If this is wrong, somebody please let me know.
http://www.macrumors.com/2012/02/16/gat ... r-testing/
As whyterabbyt already stated, looks like the system won't allow running a unsigned app unless you explicitly disable it on your system preferences.
-
AdmiralQuality AdmiralQuality https://www.kvraudio.com/forum/memberlist.php?mode=viewprofile&u=83902
- Banned
- 6657 posts since 10 Oct, 2005 from Toronto, Canada
Jesus f**king Christ!george wrote:Looks like it's not that easy.AdmiralQuality wrote: My understanding is there'll be a warning that it's unsigned. Then everybody will just do like they've been doing on Windows for years and ignore it.
If this is wrong, somebody please let me know.
http://www.macrumors.com/2012/02/16/gat ... r-testing/
As whyterabbyt already stated, looks like the system won't allow running a unsigned app unless you explicitly disable it on your system preferences.
And we get to pay $100 for the privilege of being f**ked over.
-
- KVRAF
- Topic Starter
- 5632 posts since 18 Jul, 2002
I thought we were able to enable GateKeeper with 10.7.4 under System Preferences > Security > General but I only get this:
-
AdmiralQuality AdmiralQuality https://www.kvraudio.com/forum/memberlist.php?mode=viewprofile&u=83902
- Banned
- 6657 posts since 10 Oct, 2005 from Toronto, Canada
Your macroumours link above said you need to enable it on the command line with:george wrote:I thought we were able to enable GateKeeper with 10.7.4 under System Preferences > Security > General but I only get this:
sudo spctl --enable
-
- KVRAF
- Topic Starter
- 5632 posts since 18 Jul, 2002
Yes but I get:
Code: Select all
error: invalid API object reference-
AdmiralQuality AdmiralQuality https://www.kvraudio.com/forum/memberlist.php?mode=viewprofile&u=83902
- Banned
- 6657 posts since 10 Oct, 2005 from Toronto, Canada
Hmmm. I'm afraid I can't try it myself as I'm still on 10.6 and it says 10.7.3 is required for this. And there's no way I'm going to upgrade this machine and break every project I have.george wrote:Yes but I get:Code: Select all
error: invalid API object reference
Why does anybody put up with this? And how much longer do they think people will?
-
- KVRAF
- Topic Starter
- 5632 posts since 18 Jul, 2002
My advice is installing 10.7 on a external USB drive. If you don't have one maybe you should get one... for 10.8 and GateKeeper like I willAdmiralQuality wrote:Hmmm. I'm afraid I can't try it myself as I'm still on 10.6 and it says 10.7.3 is required for this. And there's no way I'm going to upgrade this machine and break every project I have.
