Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I disable System Integrity Protection a while ago. I want to be able control my computer to the fullest. And disabling SIP is the only way to apply custom icon art to apps.
 
As I thought about it again...wouldn't this be okay as long as you know what you're downloading and installing? or is there more to that then installing 3rd party (non-registered) programs?
 
I disable System Integrity Protection a while ago. I want to be able control my computer to the fullest. And disabling SIP is the only way to apply custom icon art to apps.
 
SIP is the first real line of defense against hostile code. There are all kinds of bypasses for code signing, but when you disable SIP, you are leaving your system wide open to be rooted. It's crazy to leave it off on any system you live on.
 
Picked up the Touchbar 13" yesterday and I did notice Bartender was able to hide the Spotlight menulet, but it did not dawn on me SIP being disabled was the reason.

Just ran the Terminal command, and sure enough, SIP is disabled. :mad:
 
It was disabled on my 13" Pro with touch bar. Re-enabled it using the steps provided in the link.
 
Haha, not afraid, I have Little snitch running, and even without it I am 99.9999 % sure I won't be hacked.
We are not running windows are we!




There is no virus on OS X since the beginning OS X 10.b so I am not afraid to get one in the near future.
But, I see the sarcasme in your post.:p

When Tim Cook runs out of parts / features he can skimp on or remove , I'm sure he will have no issues selling us software we don't need ;)
 
As I thought about it again...wouldn't this be okay as long as you know what you're downloading and installing? or is there more to that then installing 3rd party (non-registered) programs?

If you use your brain you won't need SIP at all, I survived 15 years on OS X without any problems.

SIP is the first real line of defense against hostile code. There are all kinds of bypasses for code signing, but when you disable SIP, you are leaving your system wide open to be rooted. It's crazy to leave it off on any system you live on.

It's by no means as bad as you say it is, there is malware for MacOS (X) but believe me it is very rare to get infected.
 
SIP is the first real line of defense against hostile code. There are all kinds of bypasses for code signing, but when you disable SIP, you are leaving your system wide open to be rooted. It's crazy to leave it off on any system you live on.

Hostile code can run regardless whether SIP is enforced and it does nothing against vulnerabilities in protected components. A lot of damage can be done without having to infect system components. At this point the efficacy of this protection remains purely theoretical.
 
  • Like
Reactions: Mr. Retrofire
SIP is the first real line of defense against hostile code. There are all kinds of bypasses for code signing, but when you disable SIP, you are leaving your system wide open to be rooted. It's crazy to leave it off on any system you live on.

No choice. SIP goes too far. I can't use bless for example, even with super-user privileges via sudo. And bless is an Apple-provided command line utility for crying out loud, not some third party app. Also can't use any number of utilities or third party drivers that provide valuable functionality or fix issues inherent with OSX.
 
I think I had to disable it to get USB3, NTFS, or some other drivers to work with my 2010 MacBook Pro.
 
Hostile code can run regardless whether SIP is enforced and it does nothing against vulnerabilities in protected components. A lot of damage can be done without having to infect system components. At this point the efficacy of this protection remains purely theoretical.

You are correct, but actually rooting the system is much more difficult with SIP in place. Persistent threats are certainly possible without superuser privileges, and those can do tremendous damage. Which is why the next shoe to drop is requiring Apple developer signatures on all binaries, and checking them at runtime, and not simply the GateKeeper one-time download check. It's just a matter of time before Apple crosses that rubicon.
 
SIP is the first real line of defense against hostile code. There are all kinds of bypasses for code signing, but when you disable SIP, you are leaving your system wide open to be rooted. It's crazy to leave it off on any system you live on.
Not really. Most Malware on Macs don't really need to access system features that SIP protects. Not to mention the numerous utilities I use that require SIP to be disabled, even my own patches (as seen in my signature)
 
I disable System Integrity Protection a while ago. I want to be able control my computer to the fullest. And disabling SIP is the only way to apply custom icon art to apps.
Just by curiosity, could you deactivate SIP, change icons and turn it back on again?
 
Next year announcement: we have done it with courage! Apple antivirus, only 99.99 in the app store! XD

That's kinda cheap, I mean they are selling a book with photos for $300

Don't expect anything less then $199.99 for Apple Magic Virus Protection™
 
If you use your brain you won't need SIP at all, I survived 15 years on OS X without any problems.



It's by no means as bad as you say it is, there is malware for MacOS (X) but believe me it is very rare to get infected.
You expect regular non-technical customers like grandmothers know anything about that?
 
WOW! All the negativity. WOW!

MacRumors really should filter comments from M$ users.
Um...this is a forum. Why can't people express what they want to say? I hardly find anything "positive" about this issue for new apple users.
 
Is it possible for those who comment to turn on their OWN proofing before posting?

Read what you write before you select Post Reply.
[doublepost=1479410264][/doublepost]
Um...this is a forum. Why can't people express what they want to say? I hardly find anything "positive" about this issue for new apple users.
It is NOT Twitter or some other anonymous commenting social site, though.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.