Hacker News new | past | comments | ask | show | jobs | submit login

There are two separate levels

- root access - doesn’t disable SIP

- Disabling SIP requires you to go through many contortions.

People didn’t need to disable SIP to install Chrome. They were doing it for other reasons.




Yes, and those reasons are why I mentioned poor design.

This morning I was reminded, my work Mac has a dozen daemons trying to contact things I don't want, such as icloud, itunes, google, etc. A fraction of these are ostensibly useful, but I had to resort to Little Snitch to block them because the OS is read-only, i.e. insanity.

Even the user-hostile mess of Windows allows me to turn off the worse services... although even that is dwindling.


The OS is not “read only” if you go through contortions. But if you can write anything to the OS, so can anything you run




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: