Comment on It's already running

• Trainguyrom@reddthat.com ⁨1⁩ ⁨hour⁩ ago

  It’s extra fun when you’ve inserted a 30 year old install CD and Defender gets all up in arms because the developer/distributor dared to not register their signing key with Windows defender in 1998

  source

  • 9point6@lemmy.world ⁨20⁩ ⁨minutes⁩ ago

    There can only be one defender in these parts

    source
• freely1333@reddthat.com ⁨10⁩ ⁨hours⁩ ago

  Actually worse - you don’t do it in the system settings anymore. You have to run a terminal command to dequarantine it. On windows you just have to click see more and accept the risk (or similar). Mac made it way more painful with no prompt to even show you how to do it - and it sort of acts like the app is broken rather than telling you it’s even a security protection.

  source

  • Anivia@feddit.org ⁨3⁩ ⁨hours⁩ ago

    Can I get a source for that? Because I daily drive MacOS, am on the latest version, and it absolutely doesn’t behave like that for me

    source

    • anomnom@sh.itjust.works ⁨1⁩ ⁨hour⁩ ago

      The de-quarantine thing is for warez (we need this back), binaries that have been changed after signing.

      Unsigned or self signed apps make you go to the control panel, unlock and click “open anyway” and have since Gatekeeper was introduced. But you can also run spctl and mess with app or blanket settings in the command line.

      source
• REDACTED@infosec.pub ⁨11⁩ ⁨hours⁩ ago

  Nah I use both pretty regularly and I’m fairly sure macOS still makes you do the “nope sorry, press ok, go into system settings, security panel, become admin and click trust this unknown publisher” thing

  Just like I have to go into windows defender settings and add exclusions (trust) to anything it deems suspicious

  source

  • Honytawk@discuss.tchncs.de ⁨5⁩ ⁨hours⁩ ago

    That is only when it was flagged as malware.

    Defender is usually really great at defining malware and has little false positives. So you better watch out if you have to de-quarantine it.

    source