Hacker News

The big problem with these permission dialogs, is their lack of technical detail about what the app is actually trying to do which triggers them.

How do I know whether to say "Allow" or "Disallow" when it gives me no idea what either option actually means in concrete?

Have a problem with pesky permissions dialogs from sandboxed apps? This unsandboxed unverified app that requests Accessibility permissions, to the rescue!

Can I have the opposite, a tool that automatically clicks on "allow"? I installed the app, it's fine.

I'd rather something tell me exactly why this popped up in the first place, as every new OS version seems to introduce more triggers. I have apps that now pop this up when I quit, which doesn't make much sense.

Amazing. I'd LOVE for you to expand it, to also auto-dismiss "Foo.app would like to access data from other apps."

Adobe programs ask for this every time they start, and Claude Code randomly asks me this daily out of nowhere. It doesn't matter how many times I click "Don't Allow", it never gets remembered. (But of course if I ever mistakenly click "Allow" even once, that gets remembered for eternity and I never get asked again...)

Can’t we not have some OS level thing which suppresses all intrusive dialog and puts them in a nice inbox so I can decide which I want to answer or ignore in bulk…

Says a lot about the state of Mac OS.

I'm surprised nobody here is saying "what if your staging server is on the LAN, or you want to test a website from another machine?" Somehow Safari allows it, and Chrome has to go through this system that prompts you. I try never to miss one of these permissions ("yes"), because having Chrome blocked from local websites is just no good.

side note but what is the consensus on figuring out whether small brew packages like this one are malicious?

I'm sure this one probably isn't, but I have no clue how I would know whether it is without reviewing the source code myself (or pointing an agent at it etc)

> Chromium browsers (Chrome, Brave, Edge, Island, Arc) copy their own app bundle into a random temp folder at launch so the code signature survives in-place updates. macOS keys the Local Network decision to that random path, so the next launch looks like a brand-new app.

OH DEAR GOD that explains so much other cursed behavior, including the "do you want to allow google chrome helper to show notifications" always reappearing. or teams. or anything that does autoupdates.

> Nothing on a typical Mac needs this permission except a printer or scanner utility, a media server, or a LAN-discovery tool, and those you answer once and they're done.

This is wrong. Browsers and media players need it because that is how multicast discovery for stuff like Chromecast works. Spotify, same thing. And Steam plus virtually all games with LAN multiplay for the same reason. Did I note already that Steam also has an autoupdater and so does Spotify and... argh.

Apple really needs to fix the very first point, preferably in a way that doesn't force app developers to ship a "helper" binary.

(Side note: it might even be the case that opening the file picker may be enough, if you got network-discoverable paths in your Finder Locations sidebar, but i'm too tired to test that one out...)

There should be a third option: allow but give fake data

And it should be default.

This is the sort of classic MacOS situation that has mandated the use of Hammerspoon scripts and the like for more than a decade by now (this is not a sectarian point btw, Windows requires winutil just the same according to my optics)

Thanks. It’s macOS' own cookie banner and dick bar.

It’s weird they haven’t just made this a menu flag…

"One Swift file" except it's two Swift files

Hmm another gripe of mine. Mac OS's vnc brings a popup that steals your focus when someone connects to the machine while you're physically in front of it.

I know it's well intentioned but I have this weird setup where I am almost constantly keeping vnc on from my laptop to my desktop. And the mbpro randomly wakes up to do whatever, even when not used, which reactivates the vnc connection, which pops up a warning on my desktop, which steals my focus.

Anyone knows a way to disable that? Possibly just for connections from a specific other machine.

Edit: as for this app, I think the OS only asks once for a new app? I don't remember being asked a second time even when denying it.

I could also whine a bit about "this app wants to access files on a removable volume" since my desktop has a thunderbolt ssd plugged in for extra space...

Yes. Thank you. This is such a simple thing that should be a part of the operating system, and in the ideal world it would be. This is the perfect problem for the LLM to solve, because the reason it does't exist in the system is a decision by some stupid PM at Apple, and not an actual system constraint.

Permissions consent prompts are broken. they are far too coarse, and out of context. The customer is forced to consent without knowing the scope or what will break.

A better experience would be an async consent screen, with placeholder content and calls to action until permission is granted.

For example, a network ping scanner could show placeholder host names & status until the user clicks to allow access.

The operating system could easily stub the sensitive APIs with placeholder content and a flag indicating the content is false. So even legacy apps could work.

this is exactly the type of app that makes me excited to see what the future will hold with ai. any regular joe or jane can now realistically solve many of their small annoyances with little effort and no experience.

(not saying this is ai or not, i have no idea, just speaking generally)