Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Software Desktops (Apple) IT Apple

Popular Mac App Bartender's New Owner Has Burnt Years of Good-Will With a Lack of Transparency 25

An anonymous reader shares a report: Popular app Bartender was quietly bought, and a shady certificate replacement, insertion of invasive telemetry, and a lack of transparent responses by the new owners has shaken confidence in the Mac community. Menu bar organization tool Bartender has been around for a long time. For most of its life, it had an excellent reputation, and a responsive developer who communicated clearly with users. That appears to have changed, recently. It all started with a quiet pair of app certificate shifts which went mostly unnoticed.

That is, until app monitoring service MacUpdater found out, and started asking questions. They posted a warning about the app, saying that "The company and developer behind Bartender was replaced in a silent and dubious matter." But, there's a lot more to the story than just that warning. CoreCode, the developer of MacUpdater, did a great deal of research on the new owners and the app situation prior to posting the warning. They detailed their discoveries in a Reddit thread on the matter. Research performed before the warning pointed out that blog entries on the Bartender website shifted to heavily search engine optimized content. This is in contrast to the prior informational entries previously posted by original developer Ben Surtees.
This discussion has been archived. No new comments can be posted.

Popular Mac App Bartender's New Owner Has Burnt Years of Good-Will With a Lack of Transparency

Comments Filter:
  • by schneidafunk ( 795759 ) on Wednesday June 05, 2024 @11:39AM (#64524945)

    I keep thinking about the scenario of something being "approved" and then introducing shady things afterwards. For example, you go through the approval process to get your mobile app into the marketplace and then after approved, have an update or remote code execution that then does bad things.

    • Re:Common scenario (Score:5, Interesting)

      by UnknowingFool ( 672806 ) on Wednesday June 05, 2024 @11:59AM (#64524995)
      I thought I had read an article a while back about how shady companies were buying established apps by small developers in the app stores then changing the app to do nefarious things like crypto mining and spyware/malware. Some of these apps were not popular but they had an established history. For a small developer, someone wanting to buy all the IP and source code for a decent amount of money sounds like the dream. But what the new owners do with it was out of their control.
      • by Sebby ( 238625 )

        I thought I had read an article a while back about how shady companies were buying established apps by small developers in the app stores then changing the app to do nefarious things like crypto mining and spyware/malware.

        That's been a common occurrence with popular browser extensions; a bit less so with actual applications like this case.

    • For example, you go through the approval process to get your mobile app into the marketplace and then after approved, have an update or remote code execution that then does bad things.

      It doesn't work like that. The app stores have to approve updates before the updates are published in the stores. It's possible that there is less scrutiny of updates than new apps, but it's not zero.

      • I worked on a mobile app that pulled stuff from a database, and I don't recall there ever being any checks on the DB content after the initial approval. Maybe that's changed, it's been a few years since I worked on that project.

        • When I worked on an Android app, one time we had to get a senior Google exec to talk to the app approval team before an update to our app was published. Fortunately, the CEO of the company I was working for was a very successful and well-connected person and could pull some strings.

      • It doesn't work like that. The app stores have to approve updates before the updates are published in the stores. It's possible that there is less scrutiny of updates than new apps, but it's not zero.

        Given the sheer number of apps on Apple's store (Google's as well), there's no way most updates are getting more than a cursory, automated review before being approved.

  • as a mac owner (Score:4, Interesting)

    by LazarusQLong ( 5486838 ) on Wednesday June 05, 2024 @11:43AM (#64524957)
    I can say that my confidence has not been shaken at all, because the previous poster is correct, updates rarely get the same scrutiny as new app's proposing to be sold in the app store.
  • by v1 ( 525388 ) on Wednesday June 05, 2024 @12:11PM (#64525019) Homepage Journal

    I'm sure the original owner was well-compensated for the size of the app's user-base and amount of trust they had in the app.

    This sort of thing often happens when an app, a product, a brand, or a service is sold. There's no guarantee that the new owners will have the same integrity as the original owner, and it's often done quietly without public notice, to maximize value.

    The flock is worth more if the sheep are fat for slaughter.

    • by jacks smirking reven ( 909048 ) on Wednesday June 05, 2024 @12:19PM (#64525051)

      I appreciate this line in the article:

      Reddit user "Ordinary_Delivery_79" claims to be the new owner of Bartender. They said that this is a normal process, and they should have been more transparent about the certificate shift.

      Your business relies on this software and "new owner is Reddit user..." is hardly a confidence inspiring statement about anything.

      • by Calydor ( 739835 )

        Doubly so when the username is just one of Reddit's randomly generated word strings rather than an actual online handle to which the person behind it might have some amount of emotional investment.

  • Welcome to the new world where what was once a brand name with some respect is quietly bought by another entity with not even questionable intentions, it is just allowed to exist for continued monetization. Same thing has happened to most brand names even before this new-fangled internet thing.

    GE Appliances, Westinghouse, RCA, Sylvania, half the clothing brands, half of the lawn equipment brands, over half of the food brands, and Breyer's 'Ice Cream' - fuck Unilever. Wait what was the topic?
    • This reminds me of when I was looking for a new ISP. I picked one, called them, and then it went surreal:

      - I'd like to switch providers, I'm interested in your offer.
      - Ok, lets take a look... You already are our customer, what can I actually do for you?
      - What? My provider's name is $NAME1, you're $NAME2, what are you talking about?
      - We bought $NAME3, which had bought $NAME1 a few years previously.

      • by Shakrai ( 717556 )

        One of my favorite things about having a domestic partner is the annual "give me pricing that doesn't suck" conversation:

        - Hey, my bill went up, what can we do about that?
        - Nothing, that was a one time promo for new customers.
        - But I see that same price on your webpage right now.
        - That's only for new customers.
        - I understand. Can we please cancel the service?
        - Where will you go?
        - My partner is going to sign up in her name to get the pricing you refuse to give me.
        - Hold on. [few minutes delay] I've

  • Does the app have a good Sidecar recipe?

  • by libra-dragon ( 701553 ) on Wednesday June 05, 2024 @01:46PM (#64525267)

    Well, I just disabled auto updates in Setapp to keep Bartender at the recommended version (5.0.48). I hope I can stay on that version indefinitely.

  • This is likely just another example of the past, current and future reality of trying to wring a bigger buck out of whatever investors can get their hands on.
    I don't begrudge the original developer cashing out.
    At some point, it's just time to move on.

  • This is the last version signed by the original developer. Download it while you can and keep it safe.

    https://www.macbartender.com/B... [macbartender.com] 5.dmg

  • Please tell me again why I must keep all my software constantly updated (Security!) with auto-updates. "But you might get pwned!" Hasn't happened yet. Oh, maybe that's due to the customized Hardware firewall, and not using Javascript except where absolutely necessary.

"What a wonder is USENET; such wholesale production of conjecture from such a trifling investment in fact." -- Carl S. Gutekunst

Working...