I think I understand it and could probably get a 90% answer done on it myself but it would be way better to have Bart lead the discussion.<\/p>\n
Bart and I have never been big fans of things that fiddle with the Finder, and for just the reasons that you describe here. There are those that do enjoy a good kernel extension modification ( George from Tulsa) but it never sounded like a good idea to me.<\/p>\n
And then there\u2019s the lack of permissions repair now because apps can\u2019t mess with each other – huzzah!<\/p>\n
So yea – the short answer is that I like this kind of carry on as much as Allison does \ud83d\ude42<\/p>\n
The longer answer is that I have advised against these kinds of hacks for years. They are a recipe for trouble. Apple, rightly, assume that the Finder is as they left it, so when they release software updates, they do not add in extra code to work around these hacks. Most of the time the changes Apple make will not interact with the changes the hackers make, but there is a real possibility they will some day. Now, if you hack something non-critical like Pages, the only risk is that you break Pages. The Finder is different – it provides most of the OS X UI – the desktop is Finder! So, if you break Finder, you have an un-usable OS!<\/p>\n
Basically, these kinds of ‘utilities’ are playing with fire – avoid them like the plague has always, and remains, my advice. If you don’t like the Finder, use an alternative, don’t butcher the OS!<\/p>\n
So – as for why it’s a bad idea to turn off System Integrity Protection – simple, it stops malware from altering the OS. It is true that we survived without it in older versions of OS X, so it is tempting to think that it is not important. But, that attitude misses a very important reality – security is a cat and mouse game – last year’s cat was able to stand up to last year’s mouse, but last year’s cat may have more trouble with next year’s mouse, not to mention the mouse from five years into the future. Apple is not increasing it’s defences for no reason – developing SIP cost a lot of money, and Apple didn’t make that investment on a whim – they know the attackers are upping their game, so Apple is upping our defences in response.<\/p>\n
Apple are not going to roll back their security in OS X, so you are on a road to nowhere IMO. Today, it is possible to turn off SIP, and it may well be possible next year in OS X 10.12 Venice Beach (or what ever they call it), but I would not bet on it remaining possible for many versions into the future. Today, running without it is not reckless, but will that be true next year, or the year after, or five years from now? That’s another bet I wouldn’t take. All these hacks are dead men walking IMO.<\/p>\n
I’ve chosen to make my career in an industry that changes rapidly and relentlessly. After a decade and a half of experience, the most important lesson I’ve learned is to avoid swimming up-stream if at all practical – been there, done that, and that way lies only frustration and anger! I believe one of the eastern religions describes life as a river, and teaches the importance of noticing which way the current is flowing – I think they were definitely on to something!<\/p>\n
I’m going through this myself at the moment. I ADORE Aperture. But it’s on a road to nowhere. I need to become proficient in Adobe’s imaging suite. It’s painful in the short-term, but in the long term it’s inevitable I end up in the Adobe world, so I’m putting my energies into making that work for me, rather than fighting it.<\/p>\n
Not sure if this counts as tech advice or philosophy, but either way, those are my thoughts for what they’re worth \ud83d\ude42<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
Our Dumb Question this week comes from John Ormsby, aka NasaNut in the chat room. He’s asking whether it’s ok to follow the advice of some app developers and partially turn off the protections Apple has put in place in El Capitan. Here’s John’s full question where he explains why he’s asking the question:<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[147],"tags":[250,249,253,50,251,252],"class_list":["post-7775","post","type-post","status-publish","format-standard","hentry","category-blog-posts","tag-dumb-question","tag-dumb-question-corner","tag-hacks","tag-security","tag-sip","tag-system-integrity-protection"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/posts\/7775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/comments?post=7775"}],"version-history":[{"count":4,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/posts\/7775\/revisions"}],"predecessor-version":[{"id":7780,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/posts\/7775\/revisions\/7780"}],"wp:attachment":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/media?parent=7775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/categories?post=7775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/tags?post=7775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"apple](\"https:\/\/www.podfeet.com\/blog\/wp-content\/uploads\/2015\/12\/sip.png\" "\\"sip.png\\"")
Our Dumb Question this week comes from John Ormsby, aka NasaNut in the chat room. He’s asking whether it’s ok to follow the advice of some app developers and partially turn off the protections Apple has put in place in El Capitan. <\/p>\n