{"id":39981,"date":"2023-07-06T14:37:39","date_gmt":"2023-07-06T18:37:39","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=39981"},"modified":"2023-07-06T14:37:39","modified_gmt":"2023-07-06T18:37:39","slug":"how-ventura-checks-the-security-of-apps-and-tools","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2023\/07\/06\/how-ventura-checks-the-security-of-apps-and-tools\/","title":{"rendered":"How Ventura Checks the Security of Apps and Tools"},"content":{"rendered":"<p><a href=\"https:\/\/eclecticlight.co\/2023\/07\/05\/how-does-ventura-check-the-security-of-known-apps-and-command-tools\/\">Howard Oakley<\/a>:<\/p>\n<blockquote cite=\"https:\/\/eclecticlight.co\/2023\/07\/05\/how-does-ventura-check-the-security-of-known-apps-and-command-tools\/\">\n<p>When you first run an app that you&rsquo;ve just downloaded to your Mac from a source that results in it being put into quarantine, the following has occurred[&#8230;]<\/p>\n<p>[&#8230;]<\/p>\n<p>Some or all of those can also be triggered when a known app, which has already passed its first run tests, is run from a previously unknown path, when it&rsquo;s put back into quarantine, or when it remains stuck in app translocation.<\/p>\n<p>[&#8230;]<\/p>\n<p>One situation where repeated security checks could have significant impact is when repeatedly executing a third-party command tool in a script. [&#8230;] Provenance tracking thus appears to overcome overhead without compromising security.<\/p>\n<\/blockquote>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2023\/05\/10\/app-translocation-in-ventura\/\">App Translocation in Ventura<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2023\/03\/16\/ventura-adds-com-apple-provenance\/\">Ventura Adds com.apple.provenance<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2023\/03\/14\/using-a-mac-without-phoning-home\/\">Using a Mac Without Phoning Home<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2022\/11\/07\/ventura-app-management\/\">Ventura App Management<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2022\/08\/15\/xprotect-remediator\/\">XProtect Remediator<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/05\/22\/macos-10-15-slow-by-design\/\">macOS 10.15: Slow by Design<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Howard Oakley: When you first run an app that you&rsquo;ve just downloaded to your Mac from a source that results in it being put into quarantine, the following has occurred[&#8230;] [&#8230;] Some or all of those can also be triggered when a known app, which has already passed its first run tests, is run from [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2023-07-06T18:37:44Z","apple_news_api_id":"d58943ac-69e4-47f7-a83b-dc062968f004","apple_news_api_modified_at":"2023-07-06T18:37:44Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/A1YlDrGnkR_eoO9wGKWjwBA","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[466,465,30,2223,504,1842,48],"class_list":["post-39981","post","type-post","status-publish","format-standard","hentry","category-technology","tag-codesigning","tag-gatekeeper","tag-mac","tag-macos-13-ventura","tag-malware","tag-notarization","tag-security"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/39981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=39981"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/39981\/revisions"}],"predecessor-version":[{"id":39982,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/39981\/revisions\/39982"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=39981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=39981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=39981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}