Archive. This is an archive of the Apple Support Community. Discussions are being restored and soon you will be able to read and post here again.

"Malicious instructions can look legitimate"

Hi.


I am developing an ad-blocker for electron - on my CTO top spec M4 Pro Mac mini running macOs 27 Golden Gate - or at least I WOULD BE if macOs did not keep aborting my App and blocking copy/paste with a very annoying message


"Malicious instructions can look legitimate and are commonly provided in websites, chat agents, apps, files and over the phone."


Can anyone please tell me, how I might disable this feature?

To my mind ownership is to have complete liberty to use an item however one might see fit.

This machine was purchased specifically for App dev and security testing... I would like to actually be free to use it without the OS trying to own my workflow.


Many Thanks.


4 replies

Firstly, you might get better answers posting on the devs' forum.


Apple Developer Forums


Secondly, why does an app need to copy and paste? This is way above my pay grade but if you're trying to use data that's not available to your app or whatever native app your app is operating on - such as a system variable or app object - then that looks like suspicious behaviour to me, never mind the Mac's security protections. Your app probably looks like it's trying to get round sandboxing. You might be able to get round this by giving it access to the app you're trying to copy/paste data from but then anyone who uses it would be asked to grant those permissions.



Are you asking about this:


If your Mac blocks a Terminal command paste or script - Apple Support


?


This machine was purchased specifically for App dev and security testing...


... and it appears to be working exactly as intended.


However...


  • If you believe that this command or script was blocked because a website that it tries to access was incorrectly reported as deceptive, you can report an error.


Do that.


Good luck getting Apple to make an exception for you though.

I would start by making a distinction between owning the hardware and having unrestricted control over the operating system.


You have outright purchased and therefore own the physical device, including its processor, RAM, storage and other hardware components. However, ownership of the hardware does not necessarily mean ownership of the operating system or an unconditional right to have every application, process or operation execute without restriction.


macOS is Apple's proprietary operating system, and Apple determines, to a certain extent, what it permits, what warnings it displays and what security mechanisms it enforces. By purchasing a Mac, you acquire the right to use macOS under Apple's applicable licence terms, but you do not acquire complete control over Apple's software or its security policies.


That said, there is a legitimate distinction between protecting users from malicious activity and obstructing legitimate software development.


If you have deliberately chosen to develop an Electron-based ad blocker on a high-specification Mac mini for application development and security testing, it is reasonable to expect the operating system to provide a clear explanation of what it is blocking and a documented way to configure the relevant security controls where permitted.


A warning that "Malicious instructions can look legitimate and are commonly provided in websites, chat agents, apps, files and over the phone" may serve a useful purpose for less experienced users. However, repeatedly interrupting a developer's workflow without sufficient context can be frustrating, particularly when the activity is intentional and takes place in a controlled testing environment.


The answer, in my view, is not necessarily to disable every security feature, but to give the owner and administrator meaningful control over how those features operate. Developers should be able to understand the source of a restriction, distinguish an actual security threat from a false positive, and configure an appropriate development environment without having to fight opaque or unexplained operating-system behaviour.


Ultimately, buying the hardware does not guarantee unrestricted control over the software running on it. But that does not mean criticism of those restrictions is unwarranted. Security and user autonomy should not be treated as mutually exclusive.


And yes, I agree with  the perspective put forth by @ John Galt 

I_PAID_FOR_IT_I_SHOULD_OWN_IT wrote:
......
This machine was purchased specifically for App dev and security testing... I would like to actually be free to use it without the OS trying to own my workflow.
....

Apple security is doing exactly what it is supposed to. The app you are developing is appearing to try to circumvent these security measures according to what macOS is seeing even though they are not malicious. The warning is there to alert the user and it is the user's choice to continue or not.


I would suggest going to the Apple developer site and studying the guidelines for app development for macOS.


As for the ownership issue, you may own the hardware but Apple owns the OS and has the right to control what ever goes on within its operating system environment.