aboutsummaryrefslogtreecommitdiff
path: root/build/blog/2015-10-14-sip-for-the-greater-good.html
diff options
context:
space:
mode:
authorneodarz <neodarz@neodarz.net>2017-04-28 19:05:18 +0200
committerneodarz <neodarz@neodarz.net>2017-04-28 19:05:18 +0200
commitcdabe7a75ea14f14ca8d4cd3bf9ac36cb1817531 (patch)
treea3a9557d77f376394bb8e49fc48dcdef556ecb38 /build/blog/2015-10-14-sip-for-the-greater-good.html
parentd08bc695f396f8e2d7fc96de7efe61818c7c9a15 (diff)
downloadmy_new_personal_website-cdabe7a75ea14f14ca8d4cd3bf9ac36cb1817531.tar.xz
my_new_personal_website-cdabe7a75ea14f14ca8d4cd3bf9ac36cb1817531.zip
Delete some usless file
Diffstat (limited to 'build/blog/2015-10-14-sip-for-the-greater-good.html')
-rw-r--r--build/blog/2015-10-14-sip-for-the-greater-good.html43
1 files changed, 0 insertions, 43 deletions
diff --git a/build/blog/2015-10-14-sip-for-the-greater-good.html b/build/blog/2015-10-14-sip-for-the-greater-good.html
deleted file mode 100644
index 18894bcf..00000000
--- a/build/blog/2015-10-14-sip-for-the-greater-good.html
+++ /dev/null
@@ -1,43 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-<meta charset="utf-8"/>
-<meta content="pandoc" name="generator"/>
-<meta content="Zhiming Wang" name="author"/>
-<meta content="2015-10-14T17:07:24-07:00" name="date"/>
-<title>SIP — For the Greater Good</title>
-<link href="/img/apple-touch-icon-152.png" rel="apple-touch-icon-precomposed"/>
-<meta content="#FFFFFF" name="msapplication-TileColor"/>
-<meta content="/img/favicon-144.png" name="msapplication-TileImage"/>
-<meta content="width=device-width, initial-scale=1" name="viewport"/>
-<link href="/css/normalize.min.css" media="all" rel="stylesheet" type="text/css"/>
-<link href="/css/theme.css" media="all" rel="stylesheet" type="text/css"/>
-</head>
-<body>
-<div id="archival-notice">This blog has been archived.<br/>Visit my home page at <a href="https://zhimingwang.org">zhimingwang.org</a>.</div>
-<nav class="nav">
-<a class="nav-icon" href="/" title="Home"><!--blog icon--></a>
-<a class="nav-title" href="/"><!--blog title--></a>
-<a class="nav-author" href="https://github.com/zmwangx" target="_blank"><!--blog author--></a>
-</nav>
-<article class="content">
-<header class="article-header">
-<h1 class="article-title">SIP — For the Greater Good</h1>
-<div class="article-metadata">
-<time class="article-timestamp" datetime="2015-10-14T17:07:24-07:00">October 14, 2015</time>
-</div>
-</header>
-<p>In recent months I wrote a few thousand words lamenting Finder and <a href="https://en.wikipedia.org/wiki/System_Integrity_Protection">SIP</a> on El Capitan. See <a href="/blog/2015-07-30-the-sad-state-of-finder-on-el-capitan.html">The sad state of Finder on El Capitan</a> and <a href="/blog/2015-10-14-follow-up-the-sad-state-of-finder-on-el-capitan.html">its follow-up</a>.</p>
-<p>For the record, I'm not blaming SIP. It does deal a serious blow to people who in-memory patch stock applications (and there's a good discussion about the creativity aspect on <a href="http://atp.fm/episodes/128">ATP episode 128</a>), but the general public — at least more than 95% of users — should not be negatively affected, at least not in the short term. And I can understand why SIP protection comes at this time. Macs used to be safe, but in recent years we are seeing real world exploits increasingly more often. History has shown that technically-challenged users simply can't be entrusted with admin accounts, they are too willing to give their passwords to shady software downloaded from shady corners of the web (and sometimes even renowned corners get hacked). But they are given admin accounts anyway (there has to be someone knowing the admin password), so Apple has to come up with ways to protect them. SIP is a pretty good response.</p>
-<p>SIP is also good for new tinkerers. When I first started to tinker with the command line, I wasn't aware of package managers and I wasn't messing inside virtual machines, so I would download packages from official websites, then manually compile and install them to my daily system. Some packages didn't respect the <code>/usr/local/bin</code> (and <code>include</code>, <code>lib</code>, <code>libexec</code>, <code>share</code>, etc.) convention and insisted on <code>/usr/bin</code>; some others used funny locations like a standalone subdirectory of <code>/usr/local</code>; and when things don't work (e.g., can't find libraries when building — at that time I'm not familiar with <code>CFLAGS=-I</code> yet), I would explictly change <code>PREFIX</code> (probably to <code>/usr</code>) and try again. That way, over a period of a few months, I ended up with a genuinely messed up <code>/usr</code>, with all kinds of stuff everywhere. I probably overwrote quite some binaries shipped with the system. The configuration kind of worked but was pretty fragile. In the end I reinstalled the system, and started to (loosely) follow FHS (<a href="http://www.pathname.com/fhs/">Filesystem Hierarchy Standard</a>) and use package managers (first MacPorts, then Homebrew). Good times. If I were to start tinkering today, I would certainly meet some barriers early on, but I would probably also learn the good practices earlier.</p>
-<p>SIP is clearly the future, and I don't blame it. I just hope we don't see a vulnerability in the implementation soon.</p>
-</article>
-<hr class="content-separator"/>
-<footer class="footer">
-<span class="rfooter">
-<a class="rss-icon" href="/rss.xml" target="_blank" title="RSS feed"><!--RSS feed icon--></a><a class="atom-icon" href="/atom.xml" target="_blank" title="Atom feed"><!--Atom feed icon--></a><a class="cc-icon" href="https://creativecommons.org/licenses/by/4.0/" target="_blank" title="Released under the Creative Commons Attribution 4.0 International license."><!--CC icon--></a>
-<a href="https://github.com/zmwangx" target="_blank">Zhiming Wang</a>
-</span>
-</footer>
-</body>
-</html>