Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Your Computer Isn't Yours

sneak.berlin

Post reply on HN
Print view View original

31–40 of 764 posts

Re: Your Computer Isn't Yours

#31

Post by bitwize »

geocrasher wrote: post #24
RandomWorker wrote: post #14

1. Disconnect Internet (if possible) 2. Open Terminal 3. Run `sudo vi /etc/hosts` 4. Type `G$` (go to end of file) 5. Type `i`, left arrow, enter 6. Type `127.0.0.1 oscp.apple.com` 7. Press esc then type `:x` then press enter 8. Restart https://gist.github.com/nathanhleung/2ceeda4c743f2a1cf3d670c... Some updated procedure.

Open Terminal run sudo echo 127.0.0.1 oscp.apple.com >> /etc/hosts restart

In macOS 11.2, /etc/hosts magically becomes a protected file such that:

* only Apple's apps can write to it by default

* only signed third-party apps from the App Store linked to developer accounts in good standing can request permission to write to it

* you can lose your good standing by "abusing" write permission to /etc/hosts (e.g., by blocking access to Apple services)

Re: Your Computer Isn't Yours

#32

Post by [deleted] »

bitwize wrote: post #31
geocrasher wrote: post #24

Earlier quoted context omitted.

Open Terminal run sudo echo 127.0.0.1 oscp.apple.com >> /etc/hosts restart

In macOS 11.2, /etc/hosts magically becomes a protected file such that: * only Apple's apps can write to it by default * only signed third-party apps from the App Store linked to developer accounts in good standing can request permission to write to it * you can lose your good standing by "abusing" write permission to /etc/hosts (e.g., by blocking access to Apple services)

[deleted]

Re: Your Computer Isn't Yours

#34

Post by unicornporn »

jolux wrote: post #9
sneak wrote: post #5

Earlier quoted context omitted.

iCloud Backup, on by default, backs up the complete plaintext iMessage history to Apple via the network, automatically, using Apple keys. It also backs up the device's iMessage keys, to Apple via the network, automatically, using Apple keys. That's called key escrow. The plaintext message content backup bypasses the end-to-end encryption entirely, providing the service-in-the-middle with complete plaintext. Apple is…

Just turn off iCloud backup. It’s what I do.

> Just turn off iCloud backup. It’s what I do.

But is this problem a problem just at the personal level? The big problem lies at a societal level. And does it then help that a few computer hackers are informed enough to make an important (and crippling) technical decision?

Re: Your Computer Isn't Yours

#35

Post by dreamcompiler »

bitwize wrote: post #31
geocrasher wrote: post #24

Earlier quoted context omitted.

Open Terminal run sudo echo 127.0.0.1 oscp.apple.com >> /etc/hosts restart

In macOS 11.2, /etc/hosts magically becomes a protected file such that: * only Apple's apps can write to it by default * only signed third-party apps from the App Store linked to developer accounts in good standing can request permission to write to it * you can lose your good standing by "abusing" write permission to /etc/hosts (e.g., by blocking access to Apple services)

Can the owner of the computer fix this by turning off SIP?

Re: Your Computer Isn't Yours

#36

Post by mistermann »

deadbunny wrote: post #16

Yet despite all the wailing and gnashing of teeth - both in the article and in the comments here in the various threads - people are still making excuses for continuing to use Apple/Google/Microsoft/et al products because the alternatives are a bit rough round the edges. These companies have repeatedly shown that they don't respect people's privacy and people have resoundingly responded that neither do they. I would…

To be fair, if this was truly a big deal, it would be a political issue with bipartisan support and taken care of short order.

In times of strife, at least there's one thing you can always count on: Democracy. It never fails. If you can just remember that one thing, you should be able to sleep soundly at night. (It works for me at least, I used to be a constant worrywart until I learned this trick from my therapist, and I've been golden ever since.)

Re: Your Computer Isn't Yours

#37

Post by NKosmatos »

Well said, we’ve come to the point where if you want the latest silicon, a very good build quality and the most hyped technology, you’ll have to give away some of your privacy. Extra points for mentioning Cory Doctorow, who is providing most of his (prophetic I dare say) books for free over at https://craphound.com (you can also buy them and support him ;-) )

Re: Your Computer Isn't Yours

#38

Post by thayne »

RandomWorker wrote: post #14

1. Disconnect Internet (if possible) 2. Open Terminal 3. Run `sudo vi /etc/hosts` 4. Type `G$` (go to end of file) 5. Type `i`, left arrow, enter 6. Type `127.0.0.1 oscp.apple.com` 7. Press esc then type `:x` then press enter 8. Restart https://gist.github.com/nathanhleung/2ceeda4c743f2a1cf3d670c... Some updated procedure.

You're assuming that the ocsp process looks at /etc/hosts. I would not be surprised if it did it's own DNS lookup to a hardcoded DNS nameserver for the ocsp.apple.com lookup.

Re: Your Computer Isn't Yours

#39

Post by b215826 »

jolmg wrote: post #28
geocrasher wrote: post #24

Earlier quoted context omitted.

Open Terminal run sudo echo 127.0.0.1 oscp.apple.com >> /etc/hosts restart

`sudo` can't affect `>>`. `>>` is the shell opening `/etc/hosts` before launching `sudo`. sudo tee -a /etc/hosts

  sudo sh -c 'echo 127.0.0.1 oscp.apple.com >> /etc/hosts'

Re: Your Computer Isn't Yours

#40

Post by danschumann »

What I've been thinking about is doing the virtual machine route and being able to be on the same computer from dumb terminals around the house.

In this case, you could many 3rd party OS vendors supplying the host machines. Dumb terminals could get competitive.

Post reply on HN