Hacker News
points by dspillett 1 day ago | 0 comments
> This isn't entirely accurate. Plenty of apps run Terminal commands in the background (for some reason).

A lot do it because sometimes there is no convenient library wrapping what they are trying to check or execute that they are aware of, and running a cli command is generally cheap unless you are doing it in a tight loop. A lot of the time this is “it'll do until I find the right library or bindings” code that should have been fixed before release, but it isn't all as bad as running top as you describe.

[–] curt15 1 day ago
CLI tools are not to be feared or considered somehow hacky. However much big tech wants people to think that computing is all about some magic apps, Mac OS is still unix, and composing specialized programs together is very much in the spirit of the unix approach to computing.
[–] Wowfunhappy 1 day ago
> CLI tools are not to be feared or considered somehow hacky.

I agree, you're on a *nix OS, calling a CLI tool should be a perfectly valid way to do something.

IMO the real issue is that Apple's built-in CLI tools aren't properly integrated with the rest of the system. Apple's curl used to use the same certificate store as the rest of the OS, then Apple changed it.

[–] krackers 1 day ago
>used to use the same certificate store as the rest of the OS

It was technically curl that dropped SecureTransport but I guess because no one at Apple was willing to maintain it and it apparently is a frozen API that doesn't support newer than TLS 1.2 (!). For a while their inbuilt curl could use both but preferred LibreSSL anyway.

https://daniel.haxx.se/blog/2025/01/14/secure-transport-supp...

[–] Wowfunhappy 16 hours ago
> but I guess because no one at Apple was willing to maintain it and it apparently is a frozen API that doesn't support newer than TLS 1.2 (!)

Well yeah, so not really curl's fault here.

More importantly, IIRC Apple's curl actually stopped using SecureTransport before upstream dropped it.

[–] LoganDark 1 day ago
You're right, that was just the example I had on hand. Maybe a better example could be something like a video downloader that bundles yt-dlp, that could end up using this certificate store rather than the Apple APIs.