THIS CREATES A LOGIN ITEM WITH NINDI GILL!!!
Frankie24 opened this issue · comments
This MIST tool is creating a login item with "Nindi Gill" This needs to change. This is causing an issue.
Nindi Gill is the developer of Mist and thus the tool is signed with his Apple Developer Certificate.
This is expected behavior and not a bug.
This looks extremely unprofessional. I used it on a mac and it looks like really bad looks like a hacking app that Nindi Gill is coming up. Very bad!
How do I uninstall this app so the Nindi Gill name is removed from Login items as well?
This looks extremely unprofessional. I used it on a mac and it looks like really bad looks like a hacking app that Nindi Gill is coming up. Very bad!
Not to be argumentative, but this is very standard and expected behavior. I'd be more concerned about un-signed items that display as Item from unidentified developer. Most hackers probably don't use their full legal name.
For independent developers, it is simple to create a developer account as an individual and this will always have the developers name as the signing identity.
To have the signing identity be a company/organization name, the developer account has to be made as an organization which has a lot more overhead and legal requirements that tend to put that option out of reach for small independent developers who are publishing their passion/side projects for free or open source (like Mist is).
More info: https://developer.apple.com/programs/enroll/
To be blunt, the issue here is an education issue on your end. The signing identity being the developers name is not unprofessional nor is it hacky or indictive of any vulnerability. Showing the developers name may give you pause, but with a little research you can understand why this is the way it is (which is Apple's decision) and you can also research the developer listed to see if you feel they are to be trusted. In this case I personally consider Nindi Gill to be a trusted individual in the Mac development community.
Deleting or uninstalling LaunchDaemons is also a standard macOS knowledge issue. In this case, the simplest way to get it off your background items list is to remove the app and remove this file /Library/LaunchDaemons/com.ninxsoft.mist.helper.plist and reboot
And next time, rather than getting all twisted about standard macOS behavior, maybe think twice before putting in your administrator password when prompted. The app had to ask you to authenticate to get that Daemon in place. You approved it without researching or understanding what it was. You're just lucky this was a reputable app/developer and not actual malware.
This looks extremely unprofessional. I used it on a mac and it looks like really bad looks like a hacking app that Nindi Gill is coming up. Very bad!
Not to be argumentative, but this is very standard and expected behavior. I'd be more concerned about un-signed items that display as
Item from unidentified developer. Most hackers probably don't use their full legal name.
He could have easily have put "ninxsoft" instead of Nindi Gill. I have never seen a tool or an app which has the FULL government name in the software description. This tool was unfortunately installed on a mac of a high up manager and he was taken a back from the name appearing. It appears to be a hacking attempt if you see a random name. Imagine instead of the app "Teamviewer" you see Jason Bourne or whoever invented teamviewer. You'll be caught off guard too and it'll look suspicious and extremely unprofessional. "Ninxsoft" is such a beautiful and such a professional name. This is shameless self promotion from the developer.
Deleting or uninstalling LaunchDaemons is also a standard macOS knowledge issue. In this case, the simplest way to get it off your background items list is to remove the app and remove this file
/Library/LaunchDaemons/com.ninxsoft.mist.helper.plistand rebootAnd next time, rather than getting all twisted about standard macOS behavior, maybe think twice before putting in your administrator password when prompted. The app had to ask you to authenticate to get that Daemon in place. You approved it without researching or understanding what it was. You're just lucky this was a reputable app/developer and not actual malware.
Thanks, but I honestly wasn't excepting the developers full government name appearing on a mac!
For independent developers, it is simple to create a developer account as an individual and this will always have the developers name as the signing identity.
To have the signing identity be a company/organization name, the developer account has to be made as an organization which has a lot more overhead and legal requirements that tend to put that option out of reach for small independent developers who are publishing their passion/side projects for free or open source (like Mist is).
More info: https://developer.apple.com/programs/enroll/
To be blunt, the issue here is an education issue on your end. The signing identity being the developers name is not unprofessional nor is it hacky or indictive of any vulnerability. Showing the developers name may give you pause, but with a little research you can understand why this is the way it is (which is Apple's decision) and you can also research the developer listed to see if you feel they are to be trusted. In this case I personally consider Nindi Gill to be a trusted individual in the Mac development community.
Yes this is fine for a technical person. However this was installed on a user's computer and they aren't technical and seeing someone's full name appearing on login items causes alert. If they saw "Ninxsoft" instead of "Nindi Gill" they would've most likely ignored it. However they saw "Nindi Gill" It's not a common name it appears rather strange to see something like that appear on login items.
He could have easily have put "ninxsoft" instead of Nindi Gill.
An individual developer account does not have the ability or choice to change their developer signing identity name. It will always be the person's name. To have a business name, that requires the business/organization developer acccount where the name must be an established legal entity name and has all those associated legal hoops to jump through.
That all being said, I believe it should be possible to get the LaunchDaemon to show the "Mist" app name rather than the signing identity. Hopefully Nindi may be able to get that sorted.
That all being said, I believe it should be possible to get the LaunchDaemon to show the "Mist" app name rather than the signing identity. Hopefully Nindi may be able to get that sorted.
Yes please make "Mist" show up in login items instead of his full name. This causes alert when installed on a novice's mac.