fatratchet

>This is what everyone misunderstands. The Developer ID code signing program is not analogous to web certs. The usage of these certs is entirely different.

If a web cert gets revoked a browser won't accept it when making a connection to a domain/server anymore even if they previously did (unless you make it). If an app signing cert gets revoked the OS won't run a binary signed with it anymore even if it previously did (unless you make it). Sounds similar enough to me, minus expiry handling.

Revocation is indeed extremely destructive and should only used by Apple on their own accord against malware but I don't see why a dev themselves shouldn't be able to revoke their own cert without having to go back and forth with the Apple security/support team to have to try to convince them that the issue is severe enough.

The main and basically almost only reason where I see developer side revocation be used is if their keys or account have been (possibly) compromised and therefore there's a chance of it being used for malware. Time can be of big importance in a situation like that too. As a user I absolutely want Apple to revoke certs when requested by the dev themselves without triple verifying if they are really totally actually absolutely sure. I consider the upsides of that to outway the downsides.

While a binary from a dev that has been installed for a long time will be less likely to be malware but not enough to be exempt from that.

Users that dislike OSCP can disable it fully on their side if they want or locally sign anything specific they do trust. Devs didn't ask for it but having developer IDs and application singing seems like a pretty sensible thing to me in an end user OS used by the average consumer.

I don't think so, even if it was only stored that way the government will still have (name, dob, hospital) info for most citizens saved in some db/list making it easy to recreate the link back to the real person with pretty high accuracy I would assume.

Why? They are already running their own unsigned DLL injected code that can do anything they want. Even if the OS wouldn't allow it to launch an unsigned .exe, any malware can just be shipped in that DLL as easily.

It's really easy nowadays (if you have the right hardware), you can directly install the official combo update and then it usually only requires one extra reboot to update the graphics driver and possibly repatch sound driver for me, but that whole thing is automated and takes 2 mins extra for every point update every 2 months.

I've been running a 4790k + 980Ti since 10.9 came out, always kept it at the newest release and it's given me much less trouble than Windows in that timeframe.

As long as you have the typical well supported desktop hardware it works really well (intel + nvidia or select amd cards), only if you want it on a laptop or officially unsupported hardware then it quickly becomes a giant pain.

Yeah amazon cloud drive is pretty popular on /r/DataHoarder/, quite a few people have 10TB+ on it, some even a lot more.

Personally I have close to 7TB of backups and personal video footage stored, everything encrypted, never had any issues.

However there's always the danger of them pulling a onedrive at some point in the future and reverting from unlimited back to something like 1TB if people actually use it.

I love BetterTouchTool, especially since it allows setting everything on a per application basis. I use it to have the same keyboard shortcuts for navigating tabs in everything, like browsers, iterm, finder, IDEs and more, it's so nice to have consistent shortcuts.

It's also really practical for programs that don't even support custom keybinds or when running multiple instances at the same time like multiple firefox profiles. No need to set the new shortcuts in every profile, they just always work on every running firefox instance.

It also has nice features for window snapping and resizing, I have two of my side mouse buttons mapped to window move and window resize respectively, whenever I hold one of them down the window under the mouse pointer will just move/resize accordingly until I release the mouse button, including snapping to edges and all that nice stuff.

BTT is one of apps I miss most whenever I use windows, makes customizing the user experience so much easier.

They also called it a "recoupable application fee" so it sounds like they might reduce their 30% cut until the fee is earned back.

So as long as a game sells even reasonably well they could get the fee back in full while low quality shovelware gets discouraged.

For laptops I agree, lots of pain, but for desktops I've never had any major issues with the last 3 Intel+Nvidia PCs I've had over the years, always worked really well.

For me the only downside really is the extra reboot after an OS update every 2 months to update nvidia driver and repatch sound kext.

Should be possible with DLL injection or function hooking since I would guess they just check the USB id and then use the normal mic access functions so you would only have to intercept 1 or 2 calls.

On linux LD_PRELOAD should be enough.

Onedrive also has a ton of other issues like not allowing various characters in filenames: # % * : < > ? / \ | "

As well as a maximum file size of 10GB and maximum total path length of 256 characters.

I was using onedrive for a while simply because it used to be by far the cheapest with 5x10TB for 60 Euro/year with the family pack which is now being reduced to 5x1TB for the same price.

But at roughly the same price as the competition and the windows integration seemingly not being very good either I can't see any reason to use onedrive apart from just getting it with Office365.

No it's limited to promotional and referral credit from what I've read in their TOS.

I guess it might help with security of certain thins like full disk encryption. I think there are already devices used by law enforcement or hackers that that can steal disk encyption keys or information just by plugging them into any port with DMA access like firewire or express card. I would assume this could prevent that.

Didn't that already happen with the samsung lawsuit?