# Keystrokes any Application- Mac Catalina

**URL:** <https://bisq.community/t/keystrokes-any-application-mac-catalina/9213>\
**Category:** Uncategorized\
**Created:** [April 7, 2020, 9:27pm UTC](https://bisq.community/t/keystrokes-any-application-mac-catalina/9213 "2020-04-07T21:27:36Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Snick2040](https://bisq.community/letter_avatar/snick2040/32/5_5575768a8748004e209b776fc1b2916d.png) [@Snick2040](https://bisq.community/u/Snick2040)\
**Post date:** [April 7, 2020, 9:27pm UTC](https://bisq.community/t/keystrokes-any-application-mac-catalina/9213/1 "2020-04-07T21:27:36Z")

</div>

Upon install Bisq on my Mac running Catalina I get a notification that Bisq wants to ‘receive keystrokes from any application’. I hit deny. But now I am concerned about using this software. I verified the download and received this result. Am I ok? Why would Bisq want to receive keystrokes from any application??

```auto
T3000:Downloads nick$ gpg --digest-algo SHA256 --verify Bisq-1.2.9.dmg{.asc*,}
gpg: Signature made Mon Mar 16 09:20:46 2020 MDT
gpg: using RSA key CB36D7D2EBB2E35D9B75500BCD5DC1C529CDFD3B
gpg: issuer "christoph.atteneder@gmail.com"
gpg: key CD5DC1C529CDFD3B: public key "Christoph Atteneder <christoph.atteneder@gmail.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
gpg: Good signature from "Christoph Atteneder <christoph.atteneder@gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: CB36 D7D2 EBB2 E35D 9B75 500B CD5D C1C5 29CD FD3B

```

There is a warning that this key is not certificed with a trusted signature.

---

<div class="post-metadata">

**Author:** ![huey](https://bisq.community/letter_avatar/huey/32/5_5575768a8748004e209b776fc1b2916d.png) [@huey](https://bisq.community/u/huey)\
**Post date:** [April 7, 2020, 9:34pm UTC](https://bisq.community/t/keystrokes-any-application-mac-catalina/9213/2 "2020-04-07T21:34:02Z")

</div>

[It is a known issue that is being worked on](https://github.com/bisq-network/bisq/issues/3373).

Also beware that Bisq is dealing with issues currently

> [@Trading halted until v1.3.0 hotfix](https://bisq.community/t/trading-halted-until-v1-3-0-hotfix/9208):
>
> Bisq developers are currently investigating a critical security vulnerability, and the alert key has been used to temporarily disable trading. A hotfix release will be published within a few hours. EDIT: if you have any active trades right now, please DO NOT send any funds. EDIT 2: With the release of v1.3.0, trading resumes. Shortly after that, [v1.3.1 was released](https://github.com/bisq-network/bisq/releases/tag/v1.3.1), which is what you should now use. EDIT 3: If you have issues with failed trades, please reach out on the #support channel on [th…](https://keybase.io/team/bisq)

---

<div class="post-metadata">

**Author:** ![Snick2040](https://bisq.community/letter_avatar/snick2040/32/5_5575768a8748004e209b776fc1b2916d.png) [@Snick2040](https://bisq.community/u/Snick2040)\
**Post date:** [April 7, 2020, 9:43pm UTC](https://bisq.community/t/keystrokes-any-application-mac-catalina/9213/3 "2020-04-07T21:43:40Z")

</div>

Thanks for the quick reply. Has the install been compromised? Should I reinstall my OS? Not sophisticated to do anything less. Worried that something is logging my keystrokes in the background.

---

<div class="post-metadata">

**Author:** ![huey](https://bisq.community/letter_avatar/huey/32/5_5575768a8748004e209b776fc1b2916d.png) [@huey](https://bisq.community/u/huey)\
**Post date:** [April 7, 2020, 9:52pm UTC](https://bisq.community/t/keystrokes-any-application-mac-catalina/9213/4 "2020-04-07T21:52:03Z")

</div>

If you got the files from the website or the github and properly verified them, then nothing should be wrong. The two issues I mentioned above don’t seem to be related. But assuming this is your first time using Bisq it may be worth it to wait for the hotfix that will be released.

---

<div class="post-metadata">

**Author:** ![Snick2040](https://bisq.community/letter_avatar/snick2040/32/5_5575768a8748004e209b776fc1b2916d.png) [@Snick2040](https://bisq.community/u/Snick2040)\
**Post date:** [April 7, 2020, 10:22pm UTC](https://bisq.community/t/keystrokes-any-application-mac-catalina/9213/5 "2020-04-07T22:22:32Z")

</div>

Ok thanks. I downloaded Bisq from [https://bisq.network/](https://bisq.network/) and verified the download with the results below. Is my computer secure? Why does Bisq want ‘keystrokes from any application’?

```auto
T3000:Downloads nick$ gpg --digest-algo SHA256 --verify Bisq-1.2.9.dmg{.asc*,}
gpg: Signature made Mon Mar 16 09:20:46 2020 MDT
gpg: using RSA key CB36D7D2EBB2E35D9B75500BCD5DC1C529CDFD3B
gpg: issuer "christoph.atteneder@gmail.com"
gpg: key CD5DC1C529CDFD3B: public key "Christoph Atteneder <christoph.atteneder@gmail.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
gpg: Good signature from "Christoph Atteneder <christoph.atteneder@gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: CB36 D7D2 EBB2 E35D 9B75 500B CD5D C1C5 29CD FD3B

```

---

<div class="post-metadata">

**Author:** ![huey](https://bisq.community/letter_avatar/huey/32/5_5575768a8748004e209b776fc1b2916d.png) [@huey](https://bisq.community/u/huey)\
**Post date:** [April 8, 2020, 11:43am UTC](https://bisq.community/t/keystrokes-any-application-mac-catalina/9213/6 "2020-04-08T11:43:20Z")

</div>

From my understanding, it isn’t a Bisq issue but the OS you’re using. That Github issue I linked above is the best source for information I can give you.
