Interesting Leopard issue

I’ve just run in to an interesting issue between a change in the firewall in Leopard and Tiger. In Leopard, after you allow an application to have incoming connections, the application is digitally signed. On subsequent runs of the application, the signature is checked. If it is the same, all is good. Otherwise, the application isn’t allowed to launch (it appears). So what is here is what has recently happened:

  1. I have been using Skype just fine on Leopard for the last couple of weeks.
  2. A day or two ago I realized the firewall is not on by default (!) in Leopard, and turned it on.
  3. Today I launched Skype. Everything went fine (this is when the digital signature was made).

  4. This evening, I launched Skype again, but it would not open. Instead, I had the following message in my console:

    [0x0-0x152152].com.skype.skype[28314] Main starting 
[0x0-0x152152].com.skype.skype[28314] Check 1 failed. Can’t run Skype

It turns out that Skype makes a temporary file within its bundle (an application is really just a folder ending in “.app”, after all) when you run it, thus changing it’s signature (even though the file is deleted when you finish using Skype). A quick search shows that this is a known issue, and they’re working on this problem.

For now, I am solving this by re-downloading the Skype disk image and running it off of the disk image. That way, no changes are saved (including the signature), so I can still run it the next time. It means I have to re-allow Skype access to incoming connections, but you just need to keep telling yourself it’s only temporary.

So there appear to be a couple of morals to all of this:

  1. Go and make sure your firewall is turned on. It really is amazing that it’s not on by default. And no, this problem is not an excuse to leave it off.
  2. Applications should not modify themselves, even if it’s temporarily. That’s what /tmp is for, and ~/Library/Application Support.

Update 2008/01/28: I should point out this is not a problem anymore using the latest version of Skype (version 2.7.0.195 right now) and Mac OS X (version 10.5.1).

Technorati Tags: , ,

Comments

Post a Comment

Popular posts from this blog

Xcode 3 language specification changes

So much has changed in Leopard that I am not surprised I cannot find anything about this yet. Basically, the plugin interface for Xcode 3 has severely changed. In particular, over the past few days I have been trying to make a *.pblangspec file for the programming language used by my group for software verification purposes (who, it ought to be noted, I do not speak for on this website). It turns out, that’s not what I really wanted to do. I am still trying to figure out what all has changed, but here are a few key differences: The file format is totally different. This is somewhat superficially noted by the fact that the file’s extension should now be xclangspec as opposed to pblangspec . For instance, I am using Resolve.xclangspec . The file format is totally different. I’m mentioning it twice, mainly to point out that there are no guides out there for it yet. It seems to make sense, if you realize that Xcode is now doing a lot more than just keyword matching and using regular
Read more

Redux on iPhone and iPod Touch, 802.1X and LEAP

Strangely, this from October seems to be getting a lot (well, for me) traffic lately. That’s not really interesting enough to post about, but it seemed that it did make the following note more… well, noteworthy. While I don’t have either an iPhone or an iPod Touch, I do at least know someone who has an iPod Touch and could check this for me. So: It still doesn’t work in version 1.1.3. Although I haven’t seen anything about the iPhone, I would be heavily surprised if it weren’t the same deal there. Technorati Tags: iPhone , iPod
Read more

iPhone and iPod Touch, 802.1X and LEAP

This is more a note for people who were wondering like myself: the current OS X that comes with the iPod Touch and iPhone cannot handle either 802.1X or LEAP (before anyone tells me it handles 802.11x just fine, please remember that 802.1X and LEAP are specific forms of encrypting a wireless connection, not types of wireless connections. 802.1 1 x is instead a generic term used for the varying speeds of wireless, i.e. 802.11a, 802.11b, 802.11g, 802.11n, ….) This is really too bad, as both are have been built in to Mac OS X since at least version 10.3, and also both are the main ways I can get wireless at OSU . I have every intent on finding out if this gets fixed with subsequent OS updates. Incidentally, a big reason I am posting this is due to some Apple Store employees erroneously telling me it should work on the iPhone and iPod Touch, since it is built in to Mac OS X, which shares a lot of common code with the OS X on both devices (as far as anyone seems to know). I don’t fault th
Read more