{"id":27033,"date":"2019-10-24T16:39:52","date_gmt":"2019-10-24T20:39:52","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=27033"},"modified":"2019-10-24T16:42:42","modified_gmt":"2019-10-24T20:42:42","slug":"airdrop-and-quarantine-flags","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2019\/10\/24\/airdrop-and-quarantine-flags\/","title":{"rendered":"AirDrop and Quarantine Flags"},"content":{"rendered":"

Howard Oakley<\/a>:<\/p>\n

\n

AirDrop has a bigger problem, though: because it’s a semi-public way of pushing files of unknown pedigree onto an unsuspecting Mac (or iOS device), macOS attaches a quarantine flag to everything transferred by AirDrop. For documents that’s only a minor irritant, now that macOS so promiscuously<\/a> sets quarantine flags on every document opened by a sandboxed app. It can still catch you out when you try to open that document with an app other than the default for that type.<\/p>\n

But for apps, command tools and other forms of executable code, this is more serious. If you’ve just copied one of those across, on the receiving Mac that software is now going to trigger a full Gatekeeper first run check. If that destination system happens to be Catalina and the software should be notarized but isn’t, you could find yourself wasting time slipping it past that. For command tools in particular that can come as a complete surprise.<\/p>\n

[…]<\/p>\n

In Catalina, if the app isn’t notarized, double-clicking it will elicit the usual failure dialog, and opening it using the Finder’s Open command gives you the option to open it regardless.<\/p>\n<\/blockquote>\n

I get why this happens, but it’s annoying when you just want to send yourself a file. I used to do this frequently during development to test the in-progress app on other systems. In that situation, you really don’t want to have to go through the full notarization process. The contextual menu bypass seems unreliable. Sometimes it doesn’t work the first time, sometimes it launches the app but shows an error message, anyway, and I’ve received one report of it not working at all. I’ve taken to transferring using rsync<\/code> or scp<\/code>, as those don’t add quarantine flags.<\/p>\n\n

Previously:<\/p>\n