http://cuppadev.disqus.com/enWed, 18 Jul 2007 19:32:00 -0000http://www.cuppadev.co.uk/oldbrew/ssh-tunnel-manager/#comment-2429548Being paranoid and suspicious (it’s a prerequisite for teaching IT Security, sorry), I followed your recipe and compared the resulting app with the one you’re distributing…<br>&lt;pre&gt;$ diff -burpN azazil/SSH* cuppadev/SSH*<br>Binary files azazil/SSH Tunnel Manager.app/Contents/MacOS/SSH Tunnel Manager and cuppadev/SSH Tunnel Manager.app/Contents/MacOS/SSH Tunnel Manager differ<br>$ ls -l azazil/SSH Tunnel Manager.app/Contents/MacOS/SSH Tunnel Manager<br>56 -rwxr-xr-x 1 gary gary 57236 Jul 18 16:47 azazil/SSH Tunnel Manager.app/Contents/MacOS/SSH Tunnel Manager<br>$ ls -l cuppadev/SSH Tunnel Manager.app/Contents/MacOS/SSH Tunnel Manager<br>144 -rwxr-xr-x 1 gary gary 144132 Jul 18 11:49 cuppadev/SSH Tunnel Manager.app/Contents/MacOS/SSH Tunnel Manager<br>&lt;/pre&gt;<br><br>Hmmm…. I wonder what all that extra code is? Are you uploading my private keys to an anonymous ftp server somewhere? ;) But then I realised that you hadn’t explained how to configure the build as a Universal binary, and that I have just a slim intel binary. Incidentally, when I build a Universal version, my binary is still more than 3000 bytes larger than yours. Probably a slight difference between our versions of XCode. ;)<br>Cheers, GaryGazWed, 18 Jul 2007 19:32:00 -0000http://www.cuppadev.co.uk/oldbrew/ssh-tunnel-manager/#comment-2429549Hi Gaz,<br><br>Haha, i wondered if you would put your security hat on and investigate what secret code i inserted (thankfully none) :)<br><br>The XCode version i used was v2.4.1. And yes, i did miss out the step of making the arch option "i386 ppc".<br><br>With regards to security, i am surprised Apple haven't added some signing mechanism for applications, considering they are supposed to be security conscious. Actually, that sounds like a great idea for a third party app...<br><br>BTW, the comments are "textile formatted":http://en.wikipedia.org/wiki/Textile. I shall try and fix your comment for you.James UrquhartWed, 18 Jul 2007 19:32:00 -0000