I figure I'd write an annoying reminder that currently the installer (at least 
on macOS) requires admin privileges, but is not signed. This provides an 
inviting target for someone to alter the installer with malicious content, 
especially since the NetBeans brand enjoys a high "trust" factor so many 
developers will not think twice about installing it. If a trojan can happen in 
Apple's Xcode, it can happen here. Let's not get people used to trusting an 
unsigned NetBeans installer.

Is there any chance we can get these things signed again?

-Alvin

Reply via email to