Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Notarise the Fabric installer for Mac #147

Open
mrjasonn opened this issue Sep 16, 2024 · 4 comments
Open

Notarise the Fabric installer for Mac #147

mrjasonn opened this issue Sep 16, 2024 · 4 comments

Comments

@mrjasonn
Copy link

mrjasonn commented Sep 16, 2024

This seems like a useful change, as it would be easier to open it and it will give users more of a peace of mind that the Fabric installer is a safe piece of software. It is also going to be more annoying to open it in macOS 15 because they have removed the option to control click bypass notarisation requirement to open it and rather need you to go into settings and approve it, which is annoying.

@modmuss50
Copy link
Member

I would love to be able to do this, unfortunately its not possible to do without making my personal details public. I already pay for the developer account, so thats not the issue. I have looked into alterantive installation methods such as using the web filesystem API but thats not possible. If anyone has any suggestions please do let me know.

@modmuss50
Copy link
Member

modmuss50 commented Sep 16, 2024

Just doing a bit of reading, if https://developer.apple.com/forums/thread/663198 is to be believed if we dont ship native code in the jar we might be able to get away without needing to do it.

EDIT: just tried it, didnt help.

@modmuss50
Copy link
Member

One way around it might be to suggest to people to run it via the terminal. a command such as:

curl -O https://maven.fabricmc.net/net/fabricmc/fabric-installer/1.0.1/fabric-installer-1.0.1.jar && java -jar fabric-installer-1.0.1.jar

Seems to work ok for me?

@mrjasonn
Copy link
Author

mrjasonn commented Sep 18, 2024

One way around it might be to suggest to people to run it via the terminal. a command such as:

curl -O https://maven.fabricmc.net/net/fabricmc/fabric-installer/1.0.1/fabric-installer-1.0.1.jar && java -jar fabric-installer-1.0.1.jar

Seems to work ok for me?

People might not want to do this, as they might think going to the terminal to do it is complicated. They might be concerned that it is malware as it basically bypasses security checks, if it does not prompt you that its not notarised and you have never authorised it to bypass notarisation before. People are much more scared these days of malware, as there are many people who make Minecraft ratmods to try to steal accounts nowadays. This is something we should think about.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants