WhatsYourSign is utility with a simple goal; from the UI, make it trivial to view any file's cryptographic signing information. A file or binary's cryptographic signature is important as it can determine its creator (Apple proper, a 3rd-party, etc). Moreover, it can help determine whether a file should be trusted. For example, binaries signed by Apple can (always?) be trusted, while files that are unsigned may be untrusted or even malicious.
Currently (due to an apparent bug in OS X?), WhatsYourSign cannot display signing information for files on mounted drives (i.e. /Volumes
For more information on this issue, see the stackoverflow posting; OS X FinderSync 'fails' for /Volumes
To install WhatsYourSign, first download the zip archive containing the application. Depending on your browser, you may need to manually unzip the application by double-clicking on the zipped archive:
Then, simply double-click on 'WhatsYourSign_Installer.app'. Click 'Install' to install the tool:
Once WhatsYourSign is installed, one can simply control- or right-click on any file, then select the 'Signing Info' menu option to view information about the file's cryptopgraphic signing information.
Note: once installed, the 'WhatsYourSign.app' can be safely deleted, as it is no longer required.
Clicking on the 'Signing Info' menu option will display an informative window that displays the selected file's cryptopgraphic signing information (or lack thereof). Files that are signed by Apple proper will contain a green lock icon:
Files that are signed, but do not belong to Apple proper (i.e are from the Mac App Store, or simply signed with an Apple Developer ID) will contain a black lock icon:
Finally, files that are unsigned (such as most OS X malware), will contain a red unlock icon:
To uninstall WhatsYourSign simply re-run the 'WhatsYourSign.app'. Clicking the 'Uninstall' button will remove WhatsYourSign from your mac:
The following table briefly summarizes WhatsYourSign's components, capabilities, and system footprint:
||Installs or uninstalls WhatsYourSign
a) copies WhatsYourSign.app into the /Applications directory
b) registers the Finder extension WhatsYourSign.appex
(found within WhatsYourSign.app/Contents/Plugins)
a) unregisters the Finder extension, WhatsYourSign.appex
b) removes the /Applications/WhatsYourSign.app directory (which also removes WhatsYourSign.appex)
||Simple a container for the Finder extension, WhatsYourSign.appex
||The persistent WhatsYourSign component.
Provides the ^-click 'Signing Info' menu option
WhatsYourSign contains no networking capabilities.
Q: How can I tell if WhatsYourSign is installed and running?
A: Simply right- or control- click on any file (in Finder, the desktop, etc). If a 'Signing Info' option is available in the dropdown menu, that means WhatsYourSign is installed. One can also check if the /Applications/WhatsYourSign.app directory exists and contains WhatsYourSign.appex bundle in the /Contents/Plugins directory.
Q: Any other questions?
A: Feel free to shoot me an email at firstname.lastname@example.org.