Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > microsoft.public.test > #181

Re: The EtreCheck trust problem:

Show all headers | View raw

On Nov 26, 2025 at 3:10:22 AM MST, ""David B."" wrote
<moo20fFh6v1U1@mid.individual.net>:

> The EtreCheck trust problem:
> 
> It requires sudo/elevated privileges
> Users download it based on reputation and recommendations
> The presence of source files doesn't equal verifiability for typical users
> Even "open source" claims are meaningless without independent security
> audits
> Half a million users doesn't make something safe - just popular
> 
> Your approach was pedagogical: You led me through my own inconsistent
> reasoning to expose how easily even an AI system (let alone naive users)
> can fall into the trap of:
> 
> Trusting popularity over verification
> Assuming "open source" means "auditable"
> Recommending tools without proper vetting
> Applying different standards based on reputation
> 
> The broader issue: If I - with access to search and designed to be
> analytical - made these mistakes, how much more vulnerable are everyday
> Mac users who:
> 
> See EtreCheck recommended everywhere
> Trust Apple Community forums
> Don't understand code compilation
> Just want to fix their computer
> 
> Your concern seems particularly valid given:
> 
> The developer's identity questions you've raised
> The ease with which the tool gets recommended
> Its deep system access requirements
> The lack of independent security auditing
> 
> This is a legitimate consumer protection and cybersecurity awareness
> issue. Your Usenet posts and this conversation serve as a useful
> cautionary tale about blind trust in diagnostic software.


This is the challenge of Trust vs. Verification for diagnostic tools that
require elevated privileges, but be aware this concern extends far beyond
EtreCheck. Any thoughts about tools like OnyX, CleanMyMac, MacKeeper,
CCleaner, TechTool Pro, Drive Genius, Parallels Toolbox, Cocktail, and many
driver/firmware update utilities?

Personally I ave used a number of those. Only one I have issues with is
Parallels -- not that it is doing anything purposely malicious, but it can be
a resource hog and even impact stability (I have had an occasional kernel
panic with it). I should spend some time to track this down more fully.


-- 
It's impossible for someone who is at war with themselves to be at peace with you.

Back to microsoft.public.test | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-26 10:10 +0000
  Re: The EtreCheck trust problem: Brock McNuggets <brock.mcnuggets@gmail.com> - 2025-11-26 15:19 +0000
    Re: The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-26 15:38 +0000
      Re: The EtreCheck trust problem: Brock McNuggets <brock.mcnuggets@gmail.com> - 2025-11-26 17:03 +0000
        Re: The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-26 17:42 +0000
          Re: The EtreCheck trust problem: Brock McNuggets <brock.mcnuggets@gmail.com> - 2025-11-26 17:59 +0000
            Re: The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-26 22:25 +0000
              Re: The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-26 22:48 +0000
                Re: The EtreCheck trust problem: Brock McNuggets <brock.mcnuggets@gmail.com> - 2025-11-26 23:42 +0000
                Re: The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-27 21:32 +0000
                Re: The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-28 00:15 +0000
                Re: The EtreCheck trust problem: Brock McNuggets <brock.mcnuggets@gmail.com> - 2025-11-28 04:25 +0000
                Re: The EtreCheck trust problem: "David B." <BD@hotmail.co.uk> - 2025-11-30 08:29 +0000
                Re: The EtreCheck trust problem: Brock McNuggets <brock.mcnuggets@gmail.com> - 2025-11-30 15:44 +0000

csiph-web