i feel this is irrelevant.
apple offers app analytics to developers.
which means app usage data is going to apple anyway.
Does Apple really log every app you run? A technical look
101–110 of 355 posts
Re: Does Apple really log every app you run? A technical look
#102> macOS does actually send out some opaque information about the developer certificate of those apps, and that’s quite an important difference on a privacy perspective. Yes, and no. If you're using software that the state deems to be subversive or "dangerous", a developer certificate would make the nature of the software you are running pretty clear. They don't have to know exactly which program you're running, but j…
> I never asked them to do that in the first place, so I'll be blocking it from now on. Apple's working on making sure you can't block it. They already keep you from blocking their own traffic with Little Snitch and similar tools: https://news.ycombinator.com/item?id=24838816
You could block still block it externally by running a dns sinkhole (a la PiHole) on the same network, provided that you can still configure the DNS resolver.
Re: Does Apple really log every app you run? A technical look
#103There will be a day when all apps on a mac will only be installable from the app store. Developers will be forced to buy macs and subscribe to Apple’s developer program to support it. Customers will be trained to not care. And HN Apple fanboys and fangirls will try to justify why this is a Good Thing(TM).
I swear Apple is practically a cult. You could have evidence that their computers are made from bones in babies killed to make them in a third-world country and their fans would find a reason to justify it and not care.
Re: Does Apple really log every app you run? A technical look
#104Now just waiting for the trolls to write some software that makes the response always cause it to be invalid. With a wee bit of ARP magic, you could make a bunch of mac users very unhappy at the cafe's.
Re: Does Apple really log every app you run? A technical look
#105> You should be aware that macOS might transmit some opaque information about the developer certificate of the apps you run. This information is sent out in clear text on your network. Wow, that is bad from a privacy perspective! Since certificate revocation is rare, it makes more sense to simply periodically update a list of revoked certificates instead of repeatedly checking each certificate. That would solve the p…
The SLA for being made aware of revocations should be configurable from the client side. OCSP here would be fine if (a) it was sent over an encrypted connection using a preinstalled Apple root CA, and (b) the user could set the the TTL for caching the response. Larger developers (with more resources) could also feasibly implement something similar to OCSP stapling which has several desirable properties.
Re: Does Apple really log every app you run? A technical look
#106Earlier quoted context omitted.
And their participation in PRISM https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...
I thought you just ended up in PRISM you don't "join" it? Just like Google found out from the Snowden leaks and then encrypted all their DC to DC fiber.
I think there were aspects of PRISM that required cooperation from providers like Google. Like the NSA would send queries to them and they would return emails or what have you that match those queries. Though of course this “cooperation” is required by law.
Re: Does Apple really log every app you run? A technical look
#107Earlier quoted context omitted.
Apple has done a fantastic PR job regarding privacy. I am more skeptical about the status of actual privacy given their iMessage situation and now this.
And their participation in PRISM https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...
What does "participation" in PRISM mean?
> Apple: "We have never heard of PRISM"[115] "We do not provide any government agency with direct access to our servers, and any government agency requesting customer data must get a court order."[115]
* https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...
Certainly American companies are subjects to warrants and NSLs, but Google (to give one example) had its dark fibre connections between data centres tapped by the NSA. Is that the "participation" that was referred to by the Snowden documents?
* https://arstechnica.com/tech-policy/2013/10/new-docs-show-ns...
* https://www.theguardian.com/technology/2013/oct/30/google-re...
* https://venturebeat.com/2013/11/25/level-3-google-yahoo/
* https://www.washingtonpost.com/world/national-security/nsa-i...
Re: Does Apple really log every app you run? A technical look
#108> You should be aware that macOS might transmit some opaque information about the developer certificate of the apps you run. This information is sent out in clear text on your network. Wow, that is bad from a privacy perspective! Since certificate revocation is rare, it makes more sense to simply periodically update a list of revoked certificates instead of repeatedly checking each certificate. That would solve the p…
I don't quite understand why anyone would send data in clear text anymore, let alone Apple.
It's explained in the article, there's a loop if you want to verify a certificate and you need the certificate to verify the certificate
Re: Does Apple really log every app you run? A technical look
#109Earlier quoted context omitted.
> I never asked them to do that in the first place, so I'll be blocking it from now on. Apple's working on making sure you can't block it. They already keep you from blocking their own traffic with Little Snitch and similar tools: https://news.ycombinator.com/item?id=24838816
You could block still block it externally by running a dns sinkhole (a la PiHole) on the same network, provided that you can still configure the DNS resolver.
That assumes the hostname will stay the same and not get overloaded by other essential services.
Re: Does Apple really log every app you run? A technical look
#110Earlier quoted context omitted.
I thought you just ended up in PRISM you don't "join" it? Just like Google found out from the Snowden leaks and then encrypted all their DC to DC fiber.
I think there were aspects of PRISM that required cooperation from providers like Google. Like the NSA would send queries to them and they would return emails or what have you that match those queries. Though of course this “cooperation” is required by law.
If there's a court order, (FISA: https://en.wikipedia.org/wiki/Foreign_Intelligence_Surveilla..., or otherwise) companies have to comply. So I don't really see how one can blame a any company for that.