//Many of you have commented that you too find that apps and command
tools can now take surprisingly long to launch. Although my previous
analyses have demonstrated how those can often be attributed to security
checks being made on components including frameworks and dylibs, there
remains some dispute over the nature of those checks. Although I believe there’s convincing evidence that those checks are prolonged to recompute hashes and CDHashes, others are adamant that they are in fact ‘malware scans’. This article considers new evidence.
Inspecting and analysing the log during the launch of large apps isn’t
the best way of getting a clear view of what happens when macOS runs its security checks. There’s a great deal going on at the time, with
multiple security checks being performed for TCC, LaunchServices and RunningBoard in dialog, sandboxes and containers to set up, and iCloud
services to connect. Last week I’ve been tackling this more
methodically, and here use two launches of a simple command tool to give clearer insights into what’s going on when macOS runs its security checks.//
https://eclecticlight.co/2025/05/04/last-week-on-my-mac-checking-code-can-take-longer-now/
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)