Malware warning about cutbox

[bahnfrei]

I've exactly the same issue. CutBox 1.4.10 worked again on Mojave until i performed the upgrade to Catalina 10.15.4 (19E287) yesterday evening 😭

[jasonm23]

Unfortunately this is due to Apple's broken gatekeeping in Catalina.

CutBox will still work ok if you cancel the dialog.

I'd recommend anyone truly concerned about CutBox status as malware to do a thorough code review.

Also to build from source to guarantee safety.

I'm not a member of Apple's developer program so it's not possible to use their notarization process.

However see #94 + Libre Office's experience with notarization. (i.e. there's no guarantee that notarization will remove spurious messages about malware.)

This is a troubling anti-competitive / anti open source / free software maneuver by Apple, which I hope is accidental.

[jasonm23]

For reference: https://www.zdnet.com/article/apples-macos-catalina-libreoffice-users-still-get-scary-malware-messages/

[balazser]

Thank you for the comments. For me, it pops up continuously. Once. I click cancel it reopens. :-/

[jasonm23]

If you look at System Preferences > Security does it mention CutBox?

---

P.S.

Please note I don't update Macos for quite a while after a major version update and have no immediate plans to destabilize my setup by moving to Catalina anytime soon.

So I won't be able to test this myself. It's unfortunate that Apple makes it virtually impossible to roll-back macos.

[jasonm23]

Fastest solution is to install XCode 11.3.1 and build CutBox locally. It is my preference for users to build their own binaries given the landscape that Apple are setting up.

[bahnfrei]

Thank you for the comments. For me, it pops up continuously. Once. I click cancel it reopens. :-/

same here and it doesn't show up in System Preferences > Security... so it can't be approved...

[bahnfrei]

checked some other options:

sudo spctl --master-disable

===> not working

sudo spctl --add /Applications/CutBox.app
/Applications/CutBox.app: invalid API object reference

===> not working as well

[jasonm23]

It is now fairly simple to compile your own CutBox.app

Do the following: Check the README for more info.

git clone --recursive [email protected]:cutbox:CutBox
cd CutBox
bin/setup

This will show you any requirements to build that you don't have.

Next, to build your own CutBox.app:

bin/build_local_app

If everything worked out ok, a finder window will open and you can drag CutBox.app to /Applications/