Security tips when upgrading to macOS Sierra

Discussion in 'macOS Sierra (10.12)' started by underattack, Sep 11, 2016.

  1. underattack macrumors member

    Joined:
    Oct 15, 2008
    #1
  2. fischersd macrumors 68040

    fischersd

    Joined:
    Oct 23, 2014
    Location:
    Kitchener, Ontario, Canada
    #2
    Sorry, not overly impressed with that one...

    Errors/oversights in article:

    Siri

    "Not everybody may be comfortable with having Siri listen in"
    - Siri is NOT listening in. Unlike newer iOS devices, on macOS you must invoke Siri to have her listen to you.


    Apple Watch Screen Unlock

    Only 2013 and newer Mac’s (without workarounds) - this article assumes it will just work for everyone. The author admits they didn’t have an Apple Watch (so, why are they commenting???)

    - they repeat themselves by mentioning the feature again in the Continuity section (why??)

    Gatekeeper

    Completely missed mentioning the right/control click, Open to launch unsigned apps, rather than having to go into security preferences.

    Summary

    “Please consult various OS X hardening guides for advice.”

    Why publish an article advocating security only to tell people to run off and google what they should be doing? To have any value or credibility there should have been recommended links published with the article.
     
  3. leman macrumors 604

    Joined:
    Oct 14, 2008
    #3
    In addition, the iClould Keychain information seems to be inaccurate. I am fairly sure that just having the iCloud password is not sufficient. One also needs access to a device on which the keychain is already present. And if the attacker has these two things, then they probably got your password info already.

    BTW, the iCloud Keychain is probably my most favourite feature ever. No more lost passwords after reinstalling machines!
     
  4. TurboPGT! macrumors 68000

    Joined:
    Sep 25, 2015
    #4
    I'm running into issues where this method does not always work in Sierra. DMGs that are confirmed to work on 10.11 and earlier when Gatekeeper is set to "Anywhere"....are not working in Sierra with the right click - Open method. Not good.
     
  5. fischersd macrumors 68040

    fischersd

    Joined:
    Oct 23, 2014
    Location:
    Kitchener, Ontario, Canada
    #5
    Hmm. Maybe Apple's tightened things up again. How you disable the Gatekeeper nastiness is:

    sudo spctl --master-disable

    That's supposed to make behaviour the same as in El Cap.
    On the beta's it didn't seem to make any difference. Maybe they re-enabled it in the GM.
     
  6. TurboPGT! macrumors 68000

    Joined:
    Sep 25, 2015
    #6
    Hmm, tried that, and still can't open the dmgs in question.

    Edit: It did however bring back "Anywhere" as an option, but the behavior is not the same.
     
  7. fischersd macrumors 68040

    fischersd

    Joined:
    Oct 23, 2014
    Location:
    Kitchener, Ontario, Canada
    #7
    Hmm. Just might likely be different on mine as I still have SIP disabled.
     
  8. leman macrumors 604

    Joined:
    Oct 14, 2008
    #8
    Could you point us to some of the packages that are not working? All installers worked so far for me on 10.12
     
  9. TurboPGT! macrumors 68000

    Joined:
    Sep 25, 2015
    #9
    Flash Media Live Encoder: http://www.adobe.com/go/fmle32_mac
     
  10. chrfr macrumors 603

    Joined:
    Jul 11, 2009
    #10
    In this instance, the certificate used to sign the install application is not recognized as valid in 10.12.
     
  11. TurboPGT! macrumors 68000

    Joined:
    Sep 25, 2015
    #11
    Thanks I assumed so. Yet it still works on 10.11 and earlier, so I have to assume that Apple has done more to prevent Apps that are not/no longer signed.
     
  12. chrfr macrumors 603

    Joined:
    Jul 11, 2009
    #12
    If 10.11 didn't recognize the certificate, you'd get the same message. For some reason, Apple has decided to invalidate something with the certificate.
     
  13. KALLT macrumors 601

    Joined:
    Sep 23, 2008
    #13
    What exactly doesn’t work in Sierra with this application? Does Gatekeeper refuse to open it or does the application not launch properly?
     
  14. nelly22 macrumors 6502

    Joined:
    Sep 29, 2009
    #14
    I saw screenshot of Sierra setup process. In Enable Location Services screen there was not option to skip this, just continue button which i guess enables it.
    Or is this only in new machines without any user accounts?
    If i have El Capitan and Location Services are disabled, does it then have option to keep it disabled?
     

Share This Page