[OS X TeX] Skim badware?

[Alain Schremmer]

On , at 2016 Feb 8,10:11 PM, Adam R. Maxwell wrote:

> 
>> On Feb 8, 2016, at 11:10 , Alain Schremmer <Schremmer.Alain at gmail.com> wrote:
>> 
>> 4. As for what I will do, as I mentioned before, someone sent me Skim and I am now waiting for word from the authors that it is ok for me to put it on my site for download.

Well, I took the chance a couple of hours ago.

> Assuming I'm still listed as an author, I don't have a problem with this, and you're certainly free to do so under the BSD license.

Thank you very much.

> I would recommend getting it from Sourceforge. Any version you redistribute is coming from Sourceforge anyway, even if you download the source and recompile it. Other download sites just add another level of indirection and another possible scam attempt, as far as I'm concerned.

So I noticed. But, as it happens, the dmg I uploaded was emailed to me privately. So, I feel completely safe.

> Skim is codesigned, so any attempt to modify it will break the signature, and should give you a warning message. Last I checked, it was also distributed as an application on a disk image, so there's no opportunity for an attacker to embed malware in the installer…because there is no installer!

My main worry was that I had no idea whether my students would heed/understand a warning message or whatever sign of mischief there might be.

Very grateful regards
--schremmer

P.S. Now I feel I have to try skim myself.