Applehelpwriter

It's been argued that the recommended way it works is a security issue: https://applehelpwriter.com/2018/03/21/how-homebrew-invites-users-to-g… https://askubuntu.com/questions/261326/is-it-safe-to-chown-usr-local

When Dropbox deliberately circumvented Apple's security features to make itself difficult to remove [1], was the company's #1 core value of "Be worthy of trust" in mind, or was that only added in retrospect? [1] http://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-yo…

> I feel that it is one of the few companies that has kept their product simple and streamlined I'm a longitme paid Dropbox user for personal things and I have the exact _opposite_ feeling. I want Dropbox to a be a single folder that is always synced perfectly to anywhere the app is. Things like link sharing, API access, "smart sync", etc are nice bonuses. But, they had VC money (and are now public). They couldn't have been content with a complete product, there always needed to be _more_. I'm a paying user, but I still have "pay us more!" banners. They want me to connect my calendar [1]. They want me to use their writing suite with my (nonexistent) team. Their mac app has become increasingly invasive over the years. [2] I constantly feel "left behind" by them as a customer. Their product motivation so far from the reason I joined them. Each year as my renewal date looms, I look for reasonable alternatives. Ultimately it has the best syncing and I've stuck with it, but I'd almost pay extra to get rid of all the extra junk that's "integrated" with the service now. Just sync my files. [1]: https://cdn.zappy.app/b874d95cff539ec74d76e9dcd8679dad.png [2]: https://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little…

Talking about factually wrong... If you look at the full picture: https://trends.google.com/trends/explore?date=all&q=%2Fm%2F0fq175b… "DarwinPorts" was originally released in 2002. You can see it trending and then the name change which occurred in 2006. It's been on a downward trend ever since. Even thought Homebrew was released in 2009, it trends relatively constant for the entire dataset. In fact, from 2009 onward, you see a downward trend and then a slight upward trend. So, I'd say, Google is having trouble differentiating "Homebrew" as a drink and Homebrew the package manager. Now, my personal opinion on the matter: I used both Fink and MacPorts extensively since around ~2002. I eventually moved to MacPorts because it had better support for Latex at the time. MacPorts is solid and follows UNIX philosophy in its design. I've been using it for almost 15 years and in that time I've had almost zero issues with either available packages or installation bugs. It's very reliable. I did try Homebrew. Once I realised it installs user-owned files into `/usr/local`, I tossed it. It's simply broken by design. For more details, e.g. https://applehelpwriter.com/2018/03/21/how-homebrew-invites-users-to-g…

Remember their dirty tricks in the past? How Dropbox Hacks Your Mac (1037 points on Sept 9, 2016, 423 comments): https://news.ycombinator.com/item?id=12463338 Revealing Dropbox’s dirty little security hack: https://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little… Dropbox Lied to Users About Data Security: https://www.wired.com/2011/05/dropbox-ftc/

https://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-y… and the associated Hacker News discussion: https://news.ycombinator.com/item?id=12463338

https://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little… Dropbox imitated a system dialog box in order to get your password to give itself system level permissions without asking you.

discovering how Dropbox hacks your mac https://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-y… https://news.ycombinator.com/item?id=12463338

It looks like Dropbox still tries [1] to abuse [2] Accessibility services in order to gain increased access to things on your computer that applications typically shouldn't need access to. Accessibility services are for helping blind people use your software, not for your software to run roughshod all over my system. Jeez! 1: https://help.dropbox.com/installs-integrations/desktop/mac-permissions 2: https://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little…

> My point is that Linux apps don't have general root rights. Even though you must install them as root. That is, unless you start them as root. I'm running macOS, so this isn't directly relevant; I don't know much about Linux apps, but macOS ones often do some skulduggery—for example, Dropbox uses its root installation privileges to make some very hard-to-eradicate startup items (https://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-y… Nonetheless, you are right that I was confusing "installed as root" with "has root privileges". > So an app can't just decide to access and change some other app's settings. Hopefully!—at least if this happens it's a bug.

You will find this helpful. http://applehelpwriter.com/2012/11/29/stop-update-notifications-for-un…

Dropbox traditionally has some nasty habits on disk. for example: http://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-yo…

I for one won't be using iCloud for the foreseeable future. It had a lot of issues with syncing and kept asking me for my password on various devices. I keep using Dropbox for now, but without the app installed on my machine, just using the website. The reason being the sneaky way the Dropbox app tried to get Administrator rights to install some tooling on OS X [0]. --- [0]: http://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little-…

> There were news about [Dropbox] faking the prompt and storing your password Wow, I've missed that. An example of the article: http://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little-… "note the ‘Type your password…’ sentence is both misaligned and is spaced into a separate paragraph, unlike genuine authentication requests from OS X. The phrasing of the first sentence “your computer password” is also very “un-OS X”."

That is pretty sleazy. Here the author provides instructions on how to remove this: http://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little-…

Just wanted to give the author a shoutout for being awesome. This article is published with an AMP version[0] too, which is pretty unusual for smaller blogging sites. AMP articles are so much easier on my eyes (and the author can't include their own javascript on an AMP page, so there is less bloat). I wish all bloggers started to publish AMP pages. [0] - http://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-yo…

Please use the direct link to the article instead: http://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little-… This is also a dupe: https://news.ycombinator.com/item?id=12457067 Confusing and unnecessary.

IDK how much E2EE from discord will help, not only because the DMCA requests are targeted at text links not covered by AV E2EE, but also because in my experience it's less about streams detecting content, and more often content detecting being streamed. Amazon is particularly cagey about this. Playback is copy protected via widevine etc, and gets spooked even by legitimate use cases such as trying to AirPlay a browser window on my laptop to an apple TV across the room. The browser seems to be able to detect and pass on information about whether the screen is being mirrored, cast, etc. I would expect that whatever system utils discord's screen capture service hooks into would snitch to the browser, with little possible recourse by discord (short of doing something dropbox-like where they roll their own screen scrapers but try to pass it off as a normal system util [0]). Honorable mention to HDCP cabling, wherein two copy-protection-compliant (lol) devices might purposefully refuse playback when a cable manufacturer has failed to pay an annual ransom to Intel [1]. [0] https://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little… [1] https://www.cablematters.com/Blog/HDMI/what-is-hdcp-the-complete-guide Funny enough, that link about dropbox fuckery was entirely unsurfaced when I tried to search "dropbox imitate system dialog" on google, which said there were 10 pages of results on page 1, but then quit halfway down page 2. Russian search service…