BLOCKBLOCK CHANGELOG VERSION 2.0.5 (11/01/2021) improved macOS Monterey compatibility VERSION 2.0.4 (06/03/2021) Improved rule ui/deletion (#20/#27) Daemon now native arm64 VERSION 2.0.3 (04/13/2021) Improved notarization mode VERSION 2.0.2 (04/12/2021) Improved notarization mode VERSION 2.0.1 (04/07/2021) Bug fixes Improved alert UI VERSION 2.0.0 (04/06/2021) Big Sur / M1 native compatibility. Notarization Mode (block user-launched, un-notarized code). Improved logic for rule deletion. Improved plugins such as kext monitor. Bug fixes. VERSION 1.1.0 (10/20/2020) Big Sur compatibility plugin: kext monitoring improved XPC comms (thanks Thijs!) new file monitor (with process caching) UI improvements (status bar icon, rules window, etc) VERSION 1.0.2 (04/25/2020) hide dock icon when no windows VERSION 1.0.1 (04/22/2020) improved UI -menu -alert window VERSION 1.0.0 (04/20/2020) full rewrite leveraging Endpoint Security Framework secure XPC comms (mahalo @noarfromspace) VERSION 0.9.9.4 (07/30/2018) improved installer logic VERSION 0.9.9.3 (06/17/2018) improved login item plugin (NULL url check) VERSION 0.9.9.2 (06/16/2018) rewrote login item plugin to support High Sierra linked with new version of ProcInfo library (code-signing++) added Sentry.io for crash reporting VERSION 0.9.9.1 (01/14/2018) added new plugin for for 'Event Monitor' persistence added timestamp to alert window linked with new version of ProcInfo library (CPU usage--) disabled ancestry button in UI, where there's no ancestors adds selector check before invoking 'titlebarAppearsTransparent' improved code to remove dead processes from cache VERSION 0.9.9 (10/5/2017) fixed button handler for tool support added extra error checking to prevent nil insertion into dictionary VERSION 0.9.8 (9/28/2017) removed kext, replaced with procInfo library improved ancestor popover added 'view log' option in preferences window VERSION 0.9.7 (1/30/2017) virustotal integration syslogs alert info, even if UI isn't active fixed issue where nil path could be passed to code-signing checks VERSION 0.9.6 (1/17/2017) added 'headless' mode preference, to run without icon/menu in status bar fixed issue where if a 'block' failed, the error message would be shown 2x VERSION 0.9.5 (1/16/2017) 'allowed' events now persisted across reboots improved detection of sandboxed login items (applications) added support for commandline install ('-install') and uninstall ('-uninstall') added code signing info to alert window scaled back consumption of fs-events / syslog messages added checks for synthesized mouse events (mahalo @JZdziarski/@pwnsdx) improved installs for multiple users removed log message that could cause a crash VERSION 0.9.4 (12/25/2015) full El Capitan compatibility (replaced dtrace monitoring with KEXT to conform with SIP) added new plugin to detect/block creation of sandboxed (application) login items added log feature to record notable events added 'passive' mode feature (alerts not shown, but logged) added ability to disable automatic update checks, and ability to do update check manually via 'About' menu fixed UI in alerts so that lonnng paths would be truncated, and process ancestry for parentless procs would display correctly refactored install/uninstall logic so main thread/UI wouldn't block added logic to prevent daemon from trying to connect to login window/server before user was logged in re-wrote status bar icon/menu logic to use new APIs other minor code tweaks/performance boosts VERSION 0.9.3 (8/4/2015) added new plugin (beta) to detect/block creation of cron jobs fixed several Maverick-specific bugs added code to invoke plugin's 'allow' method, when related item is automatically remembered VERSION 0.9.2 (5/20/2015) fixed install scenario, where app could end up not being owned by root (credit: @noarfromspace) fixed install scenario, where a newly created ~/Library/LaunchAgents directly would have incorrect owner (credit: @noarfromspace) VERSION 0.9.1 (5/20/2015) added support for OS X 'dark-menu' mode added option to remember action (until reboot) added feature (button) to shows process' ancestry process monitor now also tracks forks to allow for better reporting improved item name extraction logic for launch items VERSION 0.9.0 (4/23/2015) initial beta release