0

I run Little Snitch on my Mac, and when I run the Monero GUI, it warns me numerous times "The process has no code signature. The executable can be maliciously modified without being detected." for many, many IP addresses.

Is this normal?

I see a lot of outgoing traffic, too, and I'm curious: why is Monero so chatty through a process that has no code signature and is susceptible to being modified? Isn't that a fairly large security risk?

1

1 Answer 1

1

The Monero developers didn't bother to buy an Apple developer license, so that's why the binary isn't signed and thus throws up that error.

2
  • So is the vulnerability to being modified without detection not a concern?
    – akseeker
    Dec 26, 2017 at 21:25
  • No. You can check the GPG signed SHA256 hashes of the binaries.
    – dEBRUYNE
    Dec 26, 2017 at 23:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.