Unity Hub - a security risk?

I’ve updated my mac to Catalina. That OS warns you when apps try to gain access to certain parts of the system. For Unity Hub, I was asked… if I wanted to allow the Hub to access keystrokes from any other application I use. Hmm. Please explain, Unity!

1 Like

Is it more of this? Unity Hub would like to access your Photos ?

I just got this message and I’m curious as well. Why would Unity Hub need access to “keystrokes”?

1 Like

Hi @transat ,

This was related to Catalina security requirements in Unity. Since the Hub launches Unity it detected the Hub as wanting to listen for keystrokes. This issue was fixed in the Editor so chances are you won’t see this in future releases.

Cheers,

1 Like

Now it’s wanting to “record my screen”! :-/

Again, I’m unsure of what kind of warnings Catalina might display. I can assure you the Hub isn’t trying to capture your keystrokes, screen content, funny cat pictures etc. Please remain patient. We’re working hard on supporting the new MacOS release.

I clicked on “approve” when it asked for my funny cat pictures. The world needs to see them.

6 Likes

well i installed Unity hub on Catalina OS today but i can’t open it

1 Like

Yes @SultanFreeman , that’s what this thread is about. We’re working on it.

1 Like

Hey @AbrahamDUnity , any update on this? This is a pretty serious security issue and the lack of a reasonable explanation as to why it’s happening is concerning to say the least.

Hello, We are working on the notarization of the hub and it will be shipped with the version 2.2 of the hub. There is no security issues to be worried about, it’s just that Catalina has higher requirements for applications to be considered secure.

Thanks @safaGH , but saying that it’s going to be fixed on the next release doesn’t explain why the Hub is currently asking for permission for recording the screen and access for keystrokes.

Hi @luispedrofonseca ,

Like my colleague mentioned we are putting most of our efforts towards this for our next release. You can expect an update in the coming weeks. As I wrote earlier this is happening because of Apple’s stricter security policy which requires us to update a significant portion of our framework dependencies. I hope this clarifies the situation.

Cheers,

Also the messages about recording screen and keystrokes are not necessarily related to the Hub. Since the Hub launches Unity these warnings may also be related to the editor (which are also addressed by other teams in parallel). In any case you can expect all these warnings to go away once we address the issue.

Sorry @AbrahamDUnity , but it doesn’t. You’re telling me exactly the same thing your colleague did. “It’s going to be fixed soon”.
What I want to know is why it is happening right now, on the current version!

[EDIT]

You made a second reply while I was writing. That makes a bit more sense but still a bit weird to be honest. Looking forward for the next release.

1 Like

Also @luispedrofonseca , let me be clear on a few points:

  • The Hub does not and never has attempted to record users’s screens.
  • The Hub only listens for keystrokes when one of its windows is open and focused (for capturing form inputs and shortcuts) and never has attempted to record keystrokes at any other time.

We are as confused as you are about those warnings and hope that this is just an issue with the way MacOS treats our application until we submit it to them for verification (notarization). We are also testing locally with Catalina to make sure our latest release no longer shows these warnings.

2 Likes

Thank you Abraham. Currently I cannot install any version of Unity2019.2 on OS X Catalina 10.15.1.

When I attempt to install from the Hub, it fills up the downloaded progress bar and then just disappears, doing nothing and signaling nothing in the Security Settings panel.

If I attempt to install Unity 2019.2.11f1 via the Mac downloader, it says “Unity Download Assistant” can’t be opened because Apple cannot check it for malicious software".

I’m assuming this is what is resolved in Unity Hub 2.2, and this is what this thread is about. Am I missing any other workarounds or am I stuck on waiting until 2.2 is released?

Thanks,
-Steve

@luks0r please report a bug in the Hub’s bug reporter. We may be able to gather something from your logs. If you wish to follow up the conversation in the forums please open a new thread as this isn’t directly related to Hub support for Catalina (since from what I understand you went past the security warning).

Thanks,

1 Like

Unity hub still trying to record my screen.
Are you still working to resolve this…?

This popped up when trying to choose a color using the color picker in the unity editor.

5294328--531453--unity hub.png

Hi @eladleb4 , this is related to the version of the Editor running which is not notarized for Catalina. Since the Hub is the parent process of the Editor in this case, macOS reports it as the Hub. You’ll see a similar message from the terminal if you open your project directly from the Editor command line interface.

newer releases of Unity have already addressed this issue.

please note, we released Hub 2.2.2 yesterday that is unfortunately not notarized for macOS Catalina. You won’t notice any Hub specific warnings except when you download and install the application again directly from our website.

hope this helps
Thanks
Daniel

1 Like