<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-size:small"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 5, 2022 at 10:08 PM Tobias Pape <<a href="mailto:Das.Linux@gmx.de">Das.Linux@gmx.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">Hi Eliot<br>
<br>
> On 6. Jul 2022, at 00:24, Eliot Miranda <<a href="mailto:eliot.miranda@gmail.com" target="_blank">eliot.miranda@gmail.com</a>> wrote:<br>
> <br>
[...]<br>
> > <br>
> > I'm not using the DMG.  I downloaded the all-in-one, and moved it.<br>
<br>
judging from the path below, yes you moved it, but not _out of_ anything in ~/Downloads ...<br></blockquote><div><br></div><div class="gmail_default" style="font-size:small">Yes I did.  My downloads folder is ~/Downloads.</div><div class="gmail_default" style="font-size:small">My Squeak folder is ~/Squeak.</div><div class="gmail_default" style="font-size:small">Safari downloaded Squeak6.0-22101-64bit-All-in-One.zip to Dowenloads, unpacked it to ~/Downloads/Squeak6, and moved the zip to the trash folder (~/.Trash)</div><div class="gmail_default" style="font-size:small">I moved Squeak6 to Squeak ($ mv ~/Downloads/Squeak6 ~/Squeak) and ran it there.</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">Look, the issue isn't whether I can do the right thing or not.  The issue is that new users on the Mac will download via the website, likely just as I did, and they will get something that doesn't work.  So instead of telling me what the right thing to do is, update the Web site so that people going there can do the right thing.</div><div class="gmail_default" style="font-size:small"><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
<br>
> <br>
> In that case, I really wonder what's going on.<br>
> Can you give me the output of<br>
> <br>
> ls -le@ <a href="http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak</a><br>
>  <br>
> Squeak$ ls -le@ Squeak6/<a href="http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak</a><br>
> -rwxr-xr-x@ 1 eliot  staff  4100688 Jul  4 16:30 Squeak6/<a href="http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak</a><br>
> com.apple.quarantine      57<br>
<br>
This quarantine will trip of Translocation<br>
<br>
> Squeak$ ls -le@ Squeak6/<a href="http://Squeak6.0-22101-64bit-All-in-One.app" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app</a><br>
> total 0<br>
> drwxr-xr-x@ 10 eliot  staff  320 Jul  4 16:32 Contents<br>
> com.apple.quarantine 57<br>
>  <br>
> <br>
> xattr -l <a href="http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak</a> <br>
> <br>
> Squeak$ xattr -l Squeak6/<a href="http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak</a><br>
> com.apple.quarantine: 0083;62c487a3;Safari;2D1FCF49-69DA-447C-BA51-16CC663654C4<br>
> <br>
> Squeak$ xattr -l Squeak6/<a href="http://Squeak6.0-22101-64bit-All-in-One.app" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app</a><br>
> com.apple.quarantine: 0083;62c487a3;Safari;2D1FCF49-69DA-447C-BA51-16CC663654C4 <br>
> <br>
> <br>
> xattr -l $PATH_OF_THE_DOWNLOADED_THING<br>
> <br>
> xattr -l ~/Downloads/Squeak6<br>
> com.apple.quarantine: 0083;62c4b913;Safari;90386985-D5B9-4492-AF0B-766931630126<br>
> <br>
> Squeak$ xattr -l ~/Downloads/Squeak6/<a href="http://Squeak6.0-22101-64bit-All-in-One.app" rel="noreferrer" target="_blank">Squeak6.0-22101-64bit-All-in-One.app</a><br>
> com.apple.quarantine: 0083;62c4b913;Safari;90386985-D5B9-4492-AF0B-766931630126<br>
<br>
Same.<br>
<br>
Can you please try again:<br>
 * unzip<br>
 * move the AIO somewhere _not_ below ~/Donwloads a<br>
<br>
and check that xattr or ls -le@ on the binary do not contain the quarantine?<br>
<br>
<br>
<br>
>  <br>
> <br>
> please?<br>
> <br>
> <br>
> > <br>
> > (this is unavoidable.)<br>
> > <br>
> > Have you got a pointer to the relevant documentation?<br>
> <br>
> Apple is scarce on any usable stuff lately…<br>
> <br>
> <br>
> >  Do I have to duplicate the Squeak6 directory?<br>
> <br>
> you should not, if you moved stuff, macOS should have disabled translocation -.-<br>
> <br>
> Lapcatsoftware has old info:<br>
>         <a href="https://lapcatsoftware.com/articles/app-translocation.html" rel="noreferrer" target="_blank">https://lapcatsoftware.com/articles/app-translocation.html</a><br>
> <br>
> Here's someone avoiding translocation via some exploit, hence not recommendable:<br>
>         <a href="https://www.synack.com/blog/untranslocating-apps/" rel="noreferrer" target="_blank">https://www.synack.com/blog/untranslocating-apps/</a><br>
> <br>
> Forum says signing the dmg or bundle helps (<a href="https://developer.apple.com/forums/thread/133743" rel="noreferrer" target="_blank">https://developer.apple.com/forums/thread/133743</a>):<br>
> "<br>
> >Another solution is to sign the .dmg file too, that should avoid app translocation if I remember correctly.<br>
> Right.<br>
> "<br>
> <br>
> This I can help with.  We have to do this for Virtend.  We sign both the app bundle and the DMG.  I guess one can also sign a zip for the all-in-one (since one uploads a zip containing either the app bundle or the dmg).<br>
<br>
Cool, maybe the signing helps.<br>
But let's first make sure the translocation does not happen when the fresh bundle is moved out of the "contaminated" location.<br>
<br>
Best regards<br>
        -Tobias<br>
<br>
> <br>
> <br>
> We probably have to be tighter in stuff, I just found a "howto":<br>
> - <a href="https://developer.apple.com/forums/thread/701581#701581021" rel="noreferrer" target="_blank">https://developer.apple.com/forums/thread/701581#701581021</a><br>
> - <a href="https://developer.apple.com/forums/thread/701514#701514021" rel="noreferrer" target="_blank">https://developer.apple.com/forums/thread/701514#701514021</a> (for signing or so…)<br>
> <br>
> <br>
> :( yay more work.<br>
> <br>
> I have scripts etc.  So LMK<br>
> <br>
> <br>
> Best regards<br>
>         -Tobias<br>
> <br>
> thanks!<br>
> <br>
> > <br>
> > Best regards<br>
> >         -Tobias<br>
> > > <br>
> > > Best,<br>
> > > Marcel<br>
> > >> Am 05.07.2022 21:03:47 schrieb Eliot Miranda <<a href="mailto:eliot.miranda@gmail.com" target="_blank">eliot.miranda@gmail.com</a>>:<br>
> > >> <br>
> > >> Hi all,<br>
> > >> <br>
> > >>     apologies for raining on the parade. Here's what I get when I either launch the Squeak6 app bundle or drop an image on it.  How can this be fixed?  It's not a good default.<br>
> > >> <br>
> > >>  <br>
> > >> <image.png><br>
> > >> _,,,^..^,,,_<br>
> > >> best, Eliot<br>
<br>
<br>
<br>
<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><span style="font-size:small;border-collapse:separate"><div>_,,,^..^,,,_<br></div><div>best, Eliot</div></span></div></div></div></div>