I'm prepping a custom installer for Nessus since it requires some unlinking/relinking to the cloud-based service. I grabbed the installer off their site. It was a DMG with a .pkg inside it. NBD, right?

Wrong.

The installer is just a 34kb stub. It references an invisible .pkg sitting at the root level of the DMG.

Seriously? Why? It only took me a few minutes to figure out but seriously, why?

And then there's the actual process of installing this on a computer that had it previously installed. You have to unlink and re-link the binary from the service. Which, again, not much of a pain, but I still have to ask: WHY?

And don't even get me started on the issue around wrong hostnames.