{"id":41062,"date":"2023-11-13T16:08:53","date_gmt":"2023-11-13T21:08:53","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=41062"},"modified":"2023-12-12T11:50:47","modified_gmt":"2023-12-12T16:50:47","slug":"a-picture-is-worth-a-thousand-permissions-requests","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2023\/11\/13\/a-picture-is-worth-a-thousand-permissions-requests\/","title":{"rendered":"A Picture Is Worth a Thousand Permissions Requests"},"content":{"rendered":"<p><a href=\"https:\/\/sixcolors.com\/offsite\/2023\/10\/apple-is-destroying-the-mac-by-trying-to-make-it-safer\/\">Jason Snell<\/a> (<a href=\"https:\/\/www.reddit.com\/r\/MacOS\/comments\/176o5ms\/apples_mission_to_make_the_mac_safer_is_slowly\/\">Reddit<\/a>, <a href=\"https:\/\/news.ycombinator.com\/item?id=37843661\">Hacker News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/sixcolors.com\/offsite\/2023\/10\/apple-is-destroying-the-mac-by-trying-to-make-it-safer\/\"><p>Due to an extremely weird series of troubleshooting maneuvers, I recently found myself having to set my Mac up from scratch without migrating any of my preferences for the first time in longer than I&rsquo;d like to admit.<\/p><p>[&#8230;]<\/p><p>More than anything else, though, the experience reminded me that Apple has a lot of work to do when it comes to making the experience of upgrading or migrating to a new Mac more pleasant&mdash;and that its Security and Privacy team clearly has too much say in the overall macOS experience.<\/p><p>[&#8230;]<\/p><p>Pick your poison: You can die quickly thanks to a barrage of privacy warnings, or you can die slowly by having to deal with privacy warnings every time you run a new app. Either way will kill you.<\/p><p>[&#8230;]<\/p><p>macOS needs to find a better way to let users broadly approve permissions for specific apps. Why am I asked to approve three or four items in sequence instead of being given some sort of simple window indicating all the permissions that are being requested, allowing me to approve or disapprove individually or all at once?<\/p><\/blockquote>\n\n<p><a href=\"https:\/\/joe-steel.com\/2023-10-12-Apple-is-destroying-the-Mac-by-trying-to-make-it-safer.html\">Joe Rosensteel<\/a>:<\/p>\n<blockquote cite=\"https:\/\/joe-steel.com\/2023-10-12-Apple-is-destroying-the-Mac-by-trying-to-make-it-safer.html\"><p>I paused, and I read that a few times to make sure I was comprehending the warning. I was warned that the application was downloaded from the internet (I downloaded) and asked &ldquo;Are you sure you want to open it?&rdquo; because I had double-clicked on it to open it. Both of those things were definitely true, so what does the little gray text mean? Oh, it wants to tell me the time it was downloaded by Safari, which I guess I could put in my personal journal, but most importantly that Apple checked it for malicious software and none was detected.<\/p><p>Are you sure you wanted to do the thing that you told the computer to do even though <em>it&rsquo;s safe?!<\/em><\/p><\/blockquote>\n\n<p><a href=\"https:\/\/initialcharge.net\/2023\/10\/rosensteel-mac-annoyances\/\">Mike Rockwell<\/a>:<\/p>\n<blockquote cite=\"https:\/\/initialcharge.net\/2023\/10\/rosensteel-mac-annoyances\/\">\n<p>macOS feels more restrictive and more <em>annoying<\/em> to use with each release. Despite having the best hardware in the industry, the operating system is starting to push me toward alternatives.<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/sixcolors.com\/post\/2023\/11\/a-picture-is-worth-a-thousand-permissions-requests\/\">Jason Snell<\/a> (<a href=\"https:\/\/news.ycombinator.com\/item?id=38196065\">Hacker News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/sixcolors.com\/post\/2023\/11\/a-picture-is-worth-a-thousand-permissions-requests\/\"><p>My point wasn&rsquo;t to ask Apple to make the Mac <em>less<\/em> secure. It was for Apple to find some ways to improve the user experience while keeping Mac users safe by default. It feels like there&rsquo;s an imbalance where security is being prioritized but the user experience is allowed to lag, and it&rsquo;s a problem.<\/p><p>[&#8230;]<\/p><p>Here&rsquo;s a screenshot I took right after my new Mac booted for the first time after migration[&#8230;]<\/p><p>What&rsquo;s happening here is that Migration Assistant has migrated all my apps, and has automatically launched any of them that are listed in Login Items or are set to automatically launch in the background. They all launch, all at once, and every single one of them then prompts me for permission to do all the things they already had permission to do on my previous Mac.<\/p><p>[&#8230;]<\/p><p>Setting up a new M3 iMac should be a pleasure. When I was done, I felt like a swarm of bees was buzzing in my head.<\/p><\/blockquote>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2023\/02\/28\/url-confirmations-in-preview\/\">URL Confirmations in Preview<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2023\/02\/09\/resetting-tcc\/\">Resetting TCC<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2022\/08\/22\/too-secure\/\">Too Secure<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/10\/16\/avoiding-applescript-security-and-privacy-requests\/\">Avoiding AppleScript Security and Privacy Requests<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2019\/07\/31\/the-alert-hammer\/\">The Alert Hammer<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2019\/07\/23\/annoying-catalina-security-features\/\">Annoying Catalina Security Features<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2019\/02\/05\/mojave-privacy-protection-aftermath\/\">Mojave Privacy Protection Aftermath<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2018\/09\/10\/mojaves-new-security-and-privacy-protections-face-usability-challenges\/\">Mojave&rsquo;s New Security and Privacy Protections Face Usability Challenges<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2018\/08\/31\/aedeterminepermissiontoautomatetarget-added-but-aepocalyse-still-looms\/\">AEDeterminePermissionToAutomateTarget Added, But AEpocalyse Still Looms<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2016\/12\/15\/macos-10-12-2-impedes-safari-bookmarklets\/\">macOS 10.12.2 Impedes Safari Bookmarklets<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2015\/05\/28\/applications-constantly-asking-permission-to-accept-incoming-connections\/\">Applications Constantly Asking Permission to Accept Incoming Connections<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2007\/02\/06\/cancel-or-allow\/\">Cancel or Allow<\/a><\/li>\n<\/ul>\n\n<p id=\"a-picture-is-worth-a-thousand-permissions-requests-update-2023-11-20\">Update (2023-11-20): <a href=\"https:\/\/mastodon.social\/@freediverx\/111406195623000995\">freediverx<\/a>:<\/p>\n<blockquote cite=\"https:\/\/mastodon.social\/@freediverx\/111406195623000995\">\n<p><a href=\"https:\/\/www.youtube.com\/watch?v=8CwoluNRSSc\">Mac Vs PC commercials - Cancel or Allow?<\/a><\/p>\n<\/blockquote>\n\n<p id=\"a-picture-is-worth-a-thousand-permissions-requests-update-2023-12-06\">Update (2023-12-06): <a href=\"https:\/\/daringfireball.net\/linked\/2023\/11\/29\/snell-macos-security\">John Gruber<\/a>:<\/p>\n<blockquote cite=\"https:\/\/daringfireball.net\/linked\/2023\/11\/29\/snell-macos-security\">\n<p>I went through the exact same thing. Except if I had taken a screenshot of all the security-permission alerts I had to go though, there would have been <em>more<\/em> of them&#x2009;&mdash;&#x2009;and Snell&rsquo;s screenshot looks like a parody. Back in the heyday of the &ldquo;Get a Mac&rdquo; TV ad campaign, <a href=\"https:\/\/www.youtube.com\/watch?v=VuqZ8AqmLPY\">Apple justifiably lambasted Windows Vista<\/a> for its security prompts, but that&rsquo;s exactly the experience you get after running Migration Assistant on a Mac today. It&rsquo;s terrible.<\/p>\n<p>[&#8230;]<\/p>\n<p>MacOS itself stores too many security\/privacy settings in a way that are tied to the device, not your user account. There ought to be some way to OK all these things in one fell swoop.<\/p>\n<\/blockquote>\n\n<p id=\"a-picture-is-worth-a-thousand-permissions-requests-update-2023-12-12\">Update (2023-12-12): <a href=\"https:\/\/twitter.com\/pfandrade_\/status\/1724365074926604505\">Paulo Andrade<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/pfandrade_\/status\/1724365074926604505\">\n<p>&ldquo;The Security and Privacy team clearly has too much say in the overall macOS experience&rdquo;.<\/p>\n<p>They not also have too much say but their solution is always to alert the user. It&rsquo;s the easy way out&#8230; once the user has alerted the it&rsquo;s now the user&rsquo;s fault.<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>Jason Snell (Reddit, Hacker News): Due to an extremely weird series of troubleshooting maneuvers, I recently found myself having to set my Mac up from scratch without migrating any of my preferences for the first time in longer than I&rsquo;d like to admit.[&#8230;]More than anything else, though, the experience reminded me that Apple has a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2023-11-13T21:08:56Z","apple_news_api_id":"71053c5d-a0a0-4991-b4d6-a01981a7f9e1","apple_news_api_modified_at":"2023-12-12T16:50:50Z","apple_news_api_revision":"AAAAAAAAAAAAAAAAAAAAAg==","apple_news_api_share_url":"https:\/\/apple.news\/AcQU8XaCgSZG01qAZgaf54Q","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[465,30,2385,1063,1842,355,48,1960],"class_list":["post-41062","post","type-post","status-publish","format-standard","hentry","category-technology","tag-gatekeeper","tag-mac","tag-macos-14-sonoma","tag-migration-assistant","tag-notarization","tag-privacy","tag-security","tag-transparency-consent-and-control-tcc"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=41062"}],"version-history":[{"count":4,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41062\/revisions"}],"predecessor-version":[{"id":41427,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41062\/revisions\/41427"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=41062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=41062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=41062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}