Would you switch off System Integrity Protection?

[KALLT]

Why do I think so? Because many of Windows security features, like UAC or Windows File Protection referred to by MikhailT are band-aids slapped on top of a system that was never designed with these features in mind. In contrast, OS X was.

I think this foundation is what served Apple well over the years, also on iOS. You can also see that Android falls behind in things that Apple contemplated many years ago and are now paying off. I think for the overall slow approach of Apple and lack of some cutting-edge features, they often really nail it when it becomes apparent years later that they laid the groundwork much earlier and are reaping the benefits. Things like app permissions, the transition to 64 bit, power and memory management, Swift. I watched many developer sessions this year and it’s just astounding how much they do even though the benefits are not immediately apparent or are set to become important in several years after. My personal

Its also a consumer based operating system. What I mean by it that the OS core is not supposed to be tweaked. For specialised applications that require a custom kernel or base system, you are much better of with a Linux or BSD distribution.

Consumer-based is not really the right comparison. Linux is simply open source, whereas OS X and Windows are proprietary, despite the open-source nature of some components (like the Darwin kernel). You can compile your own kernel or modify the system however you like. That is not something you should do with OS X and Windows.

 

[adrianlondon]

I turned off SIP to get SIMBL installed (it puts the agent in /System/Library/ScriptingAdditions) and then re-enabled SIP. I currently have Safari Cookies installed and working, and am waiting for Safari Stand to work better.

If the SIMBL agent gets deleted when I install the next beta, so be it - I'll just put it back!

 

[imorton]

I would never switch off system security just to install an app, I would rather do without the app.

You say that, but I need to use my external USB Wifi card, and it won't install with SIP. There is currently no EL CAPITAN kext/drivers for those external USB Wifi cards, so I have no choice but to disable SIP.

Maybe you can do without, but I need my external USB WiFi...

 

[leman]

Maybe you can do without, but I need WiFi...

What's wrong with the internal WiFi? BTW, Apple has been warning dev for years that drivers will need to be signed. Its a shame that so many hardware manufacturers couldn't care less about their customer base. Signing a kext is literally a 5 min job.