• Re: Someone else doesn't trust EtreCheck!

    From David B.@BoaterDave@hotmail.co.uk to uk.comp.sys.mac,alt.computer.workshop on Fri Jun 27 17:53:32 2025
    From Newsgroup: uk.comp.sys.mac

    On 18/06/2025 20:46, David B. wrote:
    On 18/06/2025 14:51, Mr |un!on *dishonestly* adjusted the Newsgroup selection!

    Tyrone <none@none.none> wrote:

    Tip: When you ask for help, do not refuse the help you are given.

    YHBT

    Nope!

    *No troll* - these are *FACTS!

    Hominahomina
    Author
    User level: Level 1
    11 points
    Jun 18, 2025 11:39 AM in response to etresoft
    I've spent more than enough time trying to find illumination about this problem. Whether it's appropriate or not for discussion in this forum, I
    ran EtreCheck due to a couple posters requesting it. Due to the glaring inconsistencies I saw in those EtreCheck reports that I generated while troubleshooting, my hesitation in providing an EtreCheck report in this forum was solely to avoid unnecessarily wasting more time on it.

    I've wiped my Apple SSD and am in the process of reconstructing it; the issue has been rendered moot.


    Reply
    etresoft
    User level: Level 9
    54,476 points
    Jun 18, 2025 8:45 AM in response to Hominahomina
    Hominahomina wrote:

    //My EtreCheck reports make no sense, that's why. I boot from a drive
    that's just been created, a pristine 15.5 install. I run EtreCheck and generate a report for that drive. That report displays three unloaded
    system extensions that have not only never been installed but when I
    select "Show in Finder" for one of those extensions, the window that's displayed is FOR A DIFFERENT DRIVE than the one from which I booted and
    is being reported on. Make that make sense.//

    It's difficult to make it make sense because it's all inherently confusing.

    EtreCheck shows all 3rd party system modifications, including those that
    are installed and running, those that are installed but not active at
    the time, and those that are not installed, but could be. System
    Extension are particularly tricky because they can be in many different states, some of which are particularly problematic. Rather than trying
    to confuse these issues even further, I have a policy to just report everything, running or not, loaded or not.

    The operating system will see apps located on any visible volume. And
    Apple is moving 3rd party system modifications from the classic
    locations in places like "/Extensions" and "~/LaunchAgents" to inside
    app bundles, wherever those might be found. What that means is that if
    you have 3rd party system modifications inside an app on some external drive, EtreCheck will show them because they really could be loaded into
    the operating system at any time.

    There are stark discontinuities between what's SUPPOSED to be in an EtreCheck report and what's ACTUALLY in the EtreCheck reports I'm seeing.

    This is s technical support forum for Apple products. If you are seeing problems with your EtreCheck report, this is really not the appropriate place to discuss them. I would be happy to do that via e-mail if you want.

    I have seen other people report similar problems. If I could see your EtreCheck report, discontinuous or not, it might be helpful to
    understand this issue. This isn't a common problem. So perhaps I've
    missed something. To be honest, profiles are not something that
    EtreCheck does particularly well. I don't have access to any of those enterprise MDM systems so it's a bit of a mystery. I can tell you that
    Apple implements ScreenTime using profiles, so that probably explains
    Apple tech support was focused on that. But it's quite possible that
    there some other oddball system service that is also using profiles and
    I've missed it.

    If you don't want to post your EtreCheck report, that's fine. You have
    my official blessing. But people may ask you to run some lower-level
    tools manually (like the kinds that EtreCheck runs for you) to gather
    more information. And this is the internet. Be careful about what people
    ask you to do. *Not everyone is trustworthy*.

    Yes, it really can feel like there are two separate versions of the
    Apple Support Communities (ASC) rCo and in a way, that's not far from the truth.

    HererCOs whatrCOs going on under the hood:

    Efoi The Two Faces of ASC

    ApplerCOs forums operate with both:

    1.rCeArCepublic-facing, anonymous-access version (for general browsing and SEO) 2.rCeAn authenticated version (tied to your Apple ID session)

    Efoa Why Some Pages Are rCLGatedrCY (Require Login)

    Here are the main reasons:

    1.rCeSession-based Behavior

    Once you log in, some threads rCo especially links from within threads or email notifications rCo may redirect you to a version thatrCOs part of your authenticated session.
    That version may display more metadata, voting options, or moderation tools. Apple may treat those links differently to prevent bots or scraping.

    2.rCeModerated or Flagged Content

    Posts that have been reported, are under review, or are partially hidden
    by ApplerCOs moderation system may not appear on the public version rCo even if theyrCOre still visible to the poster or forum regulars.

    3.rCeUser Activity or Reputation Filters

    Some older threads or less relevant replies may be hidden from anonymous
    users to improve relevance.
    Apple may use this system to protect against misuse, reputation bombing,
    or spam links being shared internally.

    4.rCeArchived/Legacy Content

    Some threads, especially older ones or those about betas and internal features, are semi-retired. They still exist and are internally linked
    within ASC, but not available to anonymous viewers.
    YourCOre required to sign in to see them rCo possibly because theyrCOve been moved to an internal moderation tier.

    5.rCeRate-Limiting & Tracking

    Apple sometimes tracks user activity across support.apple.com and discussions.apple.com.
    If you access too many threads or click on certain flagged links, you
    may hit a login wall to verify that yourCOre a real person.
    EfAU The rCLTwo ForumsrCY Illusion

    In practice:

    -rCeIf you visit via Google, you're accessing what feels like "Forum A" rCo anonymous, sanitized, SEO-friendly.

    -rCeIf you click links inside ASC or use your account, you're in "Forum B"
    rCo personalized, moderated, gated.

    TheyrCOre really the same site rCo but Apple dynamically shifts what you can see based on your identity, status, and access method.

    HTH



    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From pursent100@pursent100@gmail.com to uk.comp.sys.mac,alt.computer.workshop on Fri Jun 27 12:27:00 2025
    From Newsgroup: uk.comp.sys.mac

    David B. wrote:
    On 18/06/2025 20:46, David B. wrote:
    On 18/06/2025 14:51, Mr |un!on *dishonestly* adjusted the Newsgroup
    selection!

    Tyrone <none@none.none> wrote:

    Tip: When you ask for help, do not refuse the help you are given.

    YHBT

    Nope!

    *No troll* - these are *FACTS!

    Hominahomina
    Author
    User level: Level 1
    11 points
    Jun 18, 2025 11:39 AM in response to etresoft
    I've spent more than enough time trying to find illumination about
    this problem. Whether it's appropriate or not for discussion in this
    forum, I ran EtreCheck due to a couple posters requesting it. Due to
    the glaring inconsistencies I saw in those EtreCheck reports that I
    generated while troubleshooting, my hesitation in providing an
    EtreCheck report in this forum was solely to avoid unnecessarily
    wasting more time on it.

    I've wiped my Apple SSD and am in the process of reconstructing it;
    the issue has been rendered moot.


    Reply
    etresoft
    User level: Level 9
    54,476 points
    Jun 18, 2025 8:45 AM in response to Hominahomina
    Hominahomina wrote:

    //My EtreCheck reports make no sense, that's why. I boot from a drive
    that's just been created, a pristine 15.5 install. I run EtreCheck and
    generate a report for that drive. That report displays three unloaded
    system extensions that have not only never been installed but when I
    select "Show in Finder" for one of those extensions, the window that's
    displayed is FOR A DIFFERENT DRIVE than the one from which I booted
    and is being reported on. Make that make sense.//

    It's difficult to make it make sense because it's all inherently
    confusing.

    EtreCheck shows all 3rd party system modifications, including those
    that are installed and running, those that are installed but not
    active at the time, and those that are not installed, but could be.
    System Extension are particularly tricky because they can be in many
    different states, some of which are particularly problematic. Rather
    than trying to confuse these issues even further, I have a policy to
    just report everything, running or not, loaded or not.

    The operating system will see apps located on any visible volume. And
    Apple is moving 3rd party system modifications from the classic
    locations in places like "/Extensions" and "~/LaunchAgents" to inside
    app bundles, wherever those might be found. What that means is that if
    you have 3rd party system modifications inside an app on some external
    drive, EtreCheck will show them because they really could be loaded
    into the operating system at any time.

    There are stark discontinuities between what's SUPPOSED to be in an
    EtreCheck report and what's ACTUALLY in the EtreCheck reports I'm seeing.

    This is s technical support forum for Apple products. If you are
    seeing problems with your EtreCheck report, this is really not the
    appropriate place to discuss them. I would be happy to do that via
    e-mail if you want.

    I have seen other people report similar problems. If I could see your
    EtreCheck report, discontinuous or not, it might be helpful to
    understand this issue. This isn't a common problem. So perhaps I've
    missed something. To be honest, profiles are not something that
    EtreCheck does particularly well. I don't have access to any of those
    enterprise MDM systems so it's a bit of a mystery. I can tell you that
    Apple implements ScreenTime using profiles, so that probably explains
    Apple tech support was focused on that. But it's quite possible that
    there some other oddball system service that is also using profiles
    and I've missed it.

    If you don't want to post your EtreCheck report, that's fine. You have
    my official blessing. But people may ask you to run some lower-level
    tools manually (like the kinds that EtreCheck runs for you) to gather
    more information. And this is the internet. Be careful about what
    people ask you to do. *Not everyone is trustworthy*.

    Yes, it really can feel like there are two separate versions of the
    Apple Support Communities (ASC) rCo and in a way, that's not far from the truth.

    HererCOs whatrCOs going on under the hood:

    Efoi The Two Faces of ASC

    ApplerCOs forums operate with both:

    1.rCeArCepublic-facing, anonymous-access version (for general browsing and SEO)
    2.rCeAn authenticated version (tied to your Apple ID session)

    Efoa Why Some Pages Are rCLGatedrCY (Require Login)

    Here are the main reasons:

    1.rCeSession-based Behavior

    Once you log in, some threads rCo especially links from within threads or email notifications rCo may redirect you to a version thatrCOs part of your authenticated session.
    That version may display more metadata, voting options, or moderation
    tools.
    Apple may treat those links differently to prevent bots or scraping.

    2.rCeModerated or Flagged Content

    Posts that have been reported, are under review, or are partially hidden
    by ApplerCOs moderation system may not appear on the public version rCo even if theyrCOre still visible to the poster or forum regulars.

    3.rCeUser Activity or Reputation Filters

    Some older threads or less relevant replies may be hidden from anonymous users to improve relevance.
    Apple may use this system to protect against misuse, reputation bombing,
    or spam links being shared internally.

    4.rCeArchived/Legacy Content

    Some threads, especially older ones or those about betas and internal features, are semi-retired. They still exist and are internally linked within ASC, but not available to anonymous viewers.
    YourCOre required to sign in to see them rCo possibly because theyrCOve been moved to an internal moderation tier.

    5.rCeRate-Limiting & Tracking

    Apple sometimes tracks user activity across support.apple.com and discussions.apple.com.
    If you access too many threads or click on certain flagged links, you
    may hit a login wall to verify that yourCOre a real person.
    EfAU The rCLTwo ForumsrCY Illusion

    In practice:

    -rCeIf you visit via Google, you're accessing what feels like "Forum A" rCo anonymous, sanitized, SEO-friendly.

    -rCeIf you click links inside ASC or use your account, you're in "Forum B" rCo personalized, moderated, gated.

    TheyrCOre really the same site rCo but Apple dynamically shifts what you can see based on your identity, status, and access method.

    HTH



    have you tried running erter on erter
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Tyrone@none@none.none to alt.computer.workshop,uk.comp.sys.mac on Fri Jun 27 22:44:56 2025
    From Newsgroup: uk.comp.sys.mac

    On Jun 27, 2025 at 12:53:32rC>PM EDT, ""David B."" <BoaterDave@hotmail.co.uk> wrote:

    On 18/06/2025 20:46, David B. wrote:
    On 18/06/2025 14:51, Mr |un!on *dishonestly* adjusted the Newsgroup
    selection!

    Tyrone <none@none.none> wrote:

    Tip: When you ask for help, do not refuse the help you are given.

    YHBT

    Nope!

    *No troll* - these are *FACTS!

    Hominahomina
    Author
    User level: Level 1
    11 points
    Jun 18, 2025 11:39 AM in response to etresoft
    I've spent more than enough time trying to find illumination about this
    problem. Whether it's appropriate or not for discussion in this forum, I
    ran EtreCheck due to a couple posters requesting it. Due to the glaring
    inconsistencies I saw in those EtreCheck reports that I generated while
    troubleshooting, my hesitation in providing an EtreCheck report in this
    forum was solely to avoid unnecessarily wasting more time on it.

    I've wiped my Apple SSD and am in the process of reconstructing it; the
    issue has been rendered moot.


    Reply
    etresoft
    User level: Level 9
    54,476 points
    Jun 18, 2025 8:45 AM in response to Hominahomina
    Hominahomina wrote:

    //My EtreCheck reports make no sense, that's why. I boot from a drive
    that's just been created, a pristine 15.5 install. I run EtreCheck and
    generate a report for that drive. That report displays three unloaded
    system extensions that have not only never been installed but when I
    select "Show in Finder" for one of those extensions, the window that's
    displayed is FOR A DIFFERENT DRIVE than the one from which I booted and
    is being reported on. Make that make sense.//

    It's difficult to make it make sense because it's all inherently confusing. >>
    EtreCheck shows all 3rd party system modifications, including those that
    are installed and running, those that are installed but not active at
    the time, and those that are not installed, but could be. System
    Extension are particularly tricky because they can be in many different
    states, some of which are particularly problematic. Rather than trying
    to confuse these issues even further, I have a policy to just report
    everything, running or not, loaded or not.

    The operating system will see apps located on any visible volume. And
    Apple is moving 3rd party system modifications from the classic
    locations in places like "/Extensions" and "~/LaunchAgents" to inside
    app bundles, wherever those might be found. What that means is that if
    you have 3rd party system modifications inside an app on some external
    drive, EtreCheck will show them because they really could be loaded into
    the operating system at any time.

    There are stark discontinuities between what's SUPPOSED to be in an
    EtreCheck report and what's ACTUALLY in the EtreCheck reports I'm seeing.

    This is s technical support forum for Apple products. If you are seeing
    problems with your EtreCheck report, this is really not the appropriate
    place to discuss them. I would be happy to do that via e-mail if you want. >>
    I have seen other people report similar problems. If I could see your
    EtreCheck report, discontinuous or not, it might be helpful to
    understand this issue. This isn't a common problem. So perhaps I've
    missed something. To be honest, profiles are not something that
    EtreCheck does particularly well. I don't have access to any of those
    enterprise MDM systems so it's a bit of a mystery. I can tell you that
    Apple implements ScreenTime using profiles, so that probably explains
    Apple tech support was focused on that. But it's quite possible that
    there some other oddball system service that is also using profiles and
    I've missed it.

    If you don't want to post your EtreCheck report, that's fine. You have
    my official blessing. But people may ask you to run some lower-level
    tools manually (like the kinds that EtreCheck runs for you) to gather
    more information. And this is the internet. Be careful about what people
    ask you to do. *Not everyone is trustworthy*.

    Yes, it really can feel like there are two separate versions of the
    Apple Support Communities (ASC) rCo and in a way, that's not far from the truth.

    More of your raging paranoia.

    ASC is allowed to do whatever the hell they want. It is NOT a conspiracy against you. They do NOT need your approval.

    Get over yourself.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From pursent100@pursent100@gmail.com to alt.computer.workshop,uk.comp.sys.mac on Fri Jun 27 16:11:25 2025
    From Newsgroup: uk.comp.sys.mac

    Tyrone wrote:
    On Jun 27, 2025 at 12:53:32rC>PM EDT, ""David B."" <BoaterDave@hotmail.co.uk> wrote:

    On 18/06/2025 20:46, David B. wrote:
    On 18/06/2025 14:51, Mr |un!on *dishonestly* adjusted the Newsgroup
    selection!

    Tyrone <none@none.none> wrote:

    Tip: When you ask for help, do not refuse the help you are given.

    YHBT

    Nope!

    *No troll* - these are *FACTS!

    Hominahomina
    Author
    User level: Level 1
    11 points
    Jun 18, 2025 11:39 AM in response to etresoft
    I've spent more than enough time trying to find illumination about this
    problem. Whether it's appropriate or not for discussion in this forum, I >>> ran EtreCheck due to a couple posters requesting it. Due to the glaring
    inconsistencies I saw in those EtreCheck reports that I generated while
    troubleshooting, my hesitation in providing an EtreCheck report in this
    forum was solely to avoid unnecessarily wasting more time on it.

    I've wiped my Apple SSD and am in the process of reconstructing it; the
    issue has been rendered moot.


    Reply
    etresoft
    User level: Level 9
    54,476 points
    Jun 18, 2025 8:45 AM in response to Hominahomina
    Hominahomina wrote:

    //My EtreCheck reports make no sense, that's why. I boot from a drive
    that's just been created, a pristine 15.5 install. I run EtreCheck and
    generate a report for that drive. That report displays three unloaded
    system extensions that have not only never been installed but when I
    select "Show in Finder" for one of those extensions, the window that's
    displayed is FOR A DIFFERENT DRIVE than the one from which I booted and
    is being reported on. Make that make sense.//

    It's difficult to make it make sense because it's all inherently confusing. >>>
    EtreCheck shows all 3rd party system modifications, including those that >>> are installed and running, those that are installed but not active at
    the time, and those that are not installed, but could be. System
    Extension are particularly tricky because they can be in many different
    states, some of which are particularly problematic. Rather than trying
    to confuse these issues even further, I have a policy to just report
    everything, running or not, loaded or not.

    The operating system will see apps located on any visible volume. And
    Apple is moving 3rd party system modifications from the classic
    locations in places like "/Extensions" and "~/LaunchAgents" to inside
    app bundles, wherever those might be found. What that means is that if
    you have 3rd party system modifications inside an app on some external
    drive, EtreCheck will show them because they really could be loaded into >>> the operating system at any time.

    There are stark discontinuities between what's SUPPOSED to be in an
    EtreCheck report and what's ACTUALLY in the EtreCheck reports I'm seeing. >>>
    This is s technical support forum for Apple products. If you are seeing
    problems with your EtreCheck report, this is really not the appropriate
    place to discuss them. I would be happy to do that via e-mail if you want. >>>
    I have seen other people report similar problems. If I could see your
    EtreCheck report, discontinuous or not, it might be helpful to
    understand this issue. This isn't a common problem. So perhaps I've
    missed something. To be honest, profiles are not something that
    EtreCheck does particularly well. I don't have access to any of those
    enterprise MDM systems so it's a bit of a mystery. I can tell you that
    Apple implements ScreenTime using profiles, so that probably explains
    Apple tech support was focused on that. But it's quite possible that
    there some other oddball system service that is also using profiles and
    I've missed it.

    If you don't want to post your EtreCheck report, that's fine. You have
    my official blessing. But people may ask you to run some lower-level
    tools manually (like the kinds that EtreCheck runs for you) to gather
    more information. And this is the internet. Be careful about what people >>> ask you to do. *Not everyone is trustworthy*.

    Yes, it really can feel like there are two separate versions of the
    Apple Support Communities (ASC) rCo and in a way, that's not far from the
    truth.

    More of your raging paranoia.

    ASC is allowed to do whatever the hell they want. It is NOT a conspiracy against you. They do NOT need your approval.

    Get over yourself.

    i can't decide if i like you yet or not
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From T i m@eternal@spaced.me.uk to alt.computer.workshop,uk.comp.sys.mac on Sat Jun 28 15:20:39 2025
    From Newsgroup: uk.comp.sys.mac

    On 27/06/2025 23:44, Tyrone wrote:

    <snip>

    More of your raging paranoia.

    ASC is allowed to do whatever the hell they want. It is NOT a conspiracy against you. They do NOT need your approval.

    Get over yourself.

    You can picture the scene ... Brooksy, put in a home for his own safety,
    sat at the 'looking window' in his foil hat, staring into the distance, clutching all his 'You have been banned for life' awards and waiting for
    afternoon tea and if he can sneak out at bed time to get on the
    computer in the games room to be able to harass innocent Devs on the
    Internet.

    "Now come on David, you know you aren't supposed to be in here at this
    time and let's get you out of those wet pyjama bottoms ...".

    And that's it, it's all he's got and other than when he's asleep,
    muttering about peeling potatoes when he was in the RN and memories of
    all the AA meetings that didn't happen quick enough to stop his early cognitive decline, that and the space they have given him for his
    journal wall in the day room, he doesn't have much else. ;-(

    But at least he can't harm himself and is comforted to imagine that
    people visiting their friends and family are Ukrainian legals.

    After my Mum had a stroke she would *insist* that other victims or their visitors in the stroke unit were my sister and be angry at them for not
    saying hello to us!

    Cheers, T i m


    --- Synchronet 3.21a-Linux NewsLink 1.2