A Mac tool idea to warn when an app changes ownership
An installed Mac app can move from a trusted developer to a new owner without the user noticing. If that app updates itself under a new , it may keep sensitive such as , , and . macOS checks whether an app has a valid signature, but it does not warn when the owner or signing team changes.
MacUpdater previously helped notice this kind of signing change, but it shut down in January. permcheck is planned as a lightweight menu-bar tool that records the and of installed Mac apps, then alerts the user when one changes. The main focus is warning when an app with sensitive is re-signed by a different team.
The proposed tool would work locally on the Mac, use no cloud service, and be sold as a one-time purchase instead of a .
Key points
- A trusted Mac app can change owners and still keep sensitive already granted by the user.
- macOS checks that an app is validly signed, but it does not alert users when the signing team changes.
- permcheck would record each app’s and , then warn when they change.
- The highest-risk cases involve , , and .
- The proposed design is local-only, with no cloud service and a one-time purchase model.