0

I run Little Snitch on my Mac, and when I run the Monero GUI, it warns me numerous times "The process has no code signature. The executable can be maliciously modified without being detected." for many, many IP addresses.

Is this normal?

I see a lot of outgoing traffic, too, and I'm curious: why is Monero so chatty through a process that has no code signature and is susceptible to being modified? Isn't that a fairly large security risk?

1

The Monero developers didn't bother to buy an Apple developer license, so that's why the binary isn't signed and thus throws up that error.

| improve this answer | |
  • So is the vulnerability to being modified without detection not a concern? – akseeker Dec 26 '17 at 21:25
  • No. You can check the GPG signed SHA256 hashes of the binaries. – dEBRUYNE Dec 26 '17 at 23:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.