logoalt Hacker News

xfactorialyesterday at 4:05 PM5 repliesview on HN

I think the idea is wonderful, but a not-audited application that uses things like the camera is a “no go” for me.

Get it notorized and ask for some money! I will gladly pay it (and I hope others will do it as well).

Awesome concept: ergonomics and/or posture monitoring is a market opportunity for heavy users.


Replies

alin23yesterday at 4:36 PM

Notarization is mostly a glorified malware scan. There's no Apple engineer auditing what's being sent for notarization. Even clever malware can evade notarization scans and be distributed as a notarized binary, it has happened in the past [0]

There's no better way for auditing such an app than having the code easily available and looking through it, and compiling it yourself. Which is already the case here.

[0] https://thehackernews.com/2025/12/new-macsync-macos-stealer-...

show 1 reply
xpaskyyesterday at 4:09 PM

It's literally a single .swift file. Ask your LLM to audit it.

show 1 reply
wizzwizz4yesterday at 4:17 PM

While I disagree with you, thank you for sharing your decision-making process: you're probably not the only one who thinks this way.

In general, would you pay for a notorised build of free software, if you had use for that software, even if an un-notorised build or the source code were available?

show 1 reply
tjohnellyesterday at 8:30 PM

Posturr is now notarized!

tananaevyesterday at 4:10 PM

Are you serious? It's open source. And there's less than 1000 lines total. Get Codex or Claude to review it if you're paranoid.

show 2 replies