macOS unable to open any non-Apple application • Hacker News Board

Re: macOS unable to open any non-Apple application

#161

Post by gruez » Thu, Nov 12, 2020, 10:15 PM UTC

freeone3000 wrote: post #135

loeg wrote: post #113

Earlier quoted context omitted.

The URL mentioned in sibling comments suggests this has to do with certificate revocation (OCSP): https://en.wikipedia.org/wiki/Online_Certificate_Status_Prot... I agree that breaking system availability when an OCSP server isn't available is user-hostile and unnecessary.

The alternative is OCSP being allowed if internet isn't available, which is a security risk for reasonable defense-in-depth strategies.

Most OSCP implementations fail-open, not fail-closed. I get the benefits of having it fail-closed, but it should be opt in, because having an always-online requirement for using a mac is ridiculous.

Re: macOS unable to open any non-Apple application

#162

Post by pier25 » Thu, Nov 12, 2020, 10:15 PM UTC

DavideNL wrote: post #34

This is horrible. How can launching apps be depending on a cloud service being available...

And also, if you decide to implement such a horrible idea, how come you don't have a proper plan for when shit happens?

Re: macOS unable to open any non-Apple application

#163

Post by mtnygard » Thu, Nov 12, 2020, 10:15 PM UTC

valuearb wrote: post #142

Lammy wrote: post #33

Maybe it's just me but the idea that my computer lets Apple (+ any LE organizations) surveil my app launches seems so much scarier than any malware.

Why is it scary that your computer checks for malware? It’s not like Apple us building a database of apps you’ve launched linked to your address and social security number.

I can't tell if you're being sarcastic or serious. Schrodinger's sarcasm.

Re: macOS unable to open any non-Apple application

#164

Post by auslegung » Thu, Nov 12, 2020, 10:15 PM UTC

read_if_gay_ wrote: post #57

submeta wrote: post #2

Unbelievable. When I read the tweet (tried to post here as well), I suddenly realized why my Mac was unresponsive an hour ago. Here is another tweet that describes the problem in more detail: https://mobile.twitter.com/llanga/status/1326989724704268289 > I am currently unable to work because macOS sends hashes of every opened executable to some server of theirs and when `trustd` and `syspolicyd` are unable to do so,…

I started panicking mildly thinking my drive was failing or something. And just before this, I finally managed to fix Spotlight pegging one core at 100% constantly. Next thing, I reboot into a laggy system. macOS is my favorite OS, but the shit I put up with... it's basically an abusive relationship at this point.

> macOS is my favorite OS, but the shit I put up with...

Idk, the several Linux distros I’ve used recently, and Windows, have a much longer list of “shit _I_ put up with”

Re: macOS unable to open any non-Apple application

#165

Post by Spivak » Thu, Nov 12, 2020, 10:16 PM UTC

josephcsible wrote: post #125

p1necone wrote: post #58

Earlier quoted context omitted.

Wait what happens if you don't have an internet connection? Can Macs not be used offline any more, surely that's still a relatively common use case for a laptop even today in a lot of places?

My understanding is that if you're offline, it skips this check and everything works fine. The reason this is a big deal is that the problem's on their end, so you're not offline, so it keeps trying and waiting instead of just letting you skip the check.

Unfortunately there’s not a way to differentiate “we’re online but Apple’s servers are having issues — probably fine” and “we’re online and something something is preventing us from talking to them — something nefarious might be happening.”

Re: macOS unable to open any non-Apple application

#166

Post by staz » Thu, Nov 12, 2020, 10:16 PM UTC

rubatuga wrote: post #10

Does anybody now how to disable all hashing on macOS? The best I could do was disable GateKeeper with `sudo spctl --master-disable`.

Install another OS? *

There are some work around in this thread but in reality you don't know how and when Apple may choose to automatically re-enable it without your consent.

* You should probably just smack you Mac with a rock just to be sure ;)

Re: macOS unable to open any non-Apple application

#167

Post by charwalker » Thu, Nov 12, 2020, 10:16 PM UTC

I though this was known as early as May?

https://medium.com/@acecilia/apple-is-sending-a-request-to-t...

Re: macOS unable to open any non-Apple application

#168

Post by bkovacev » Thu, Nov 12, 2020, 10:16 PM UTC

romanovcode wrote: post #117

Lammy wrote: post #33

Maybe it's just me but the idea that my computer lets Apple (+ any LE organizations) surveil my app launches seems so much scarier than any malware.

This has happened since forever on Mac, Windows and Ubuntu.

Can you please provide resources for Ubuntu?

Re: macOS unable to open any non-Apple application

#169

Post by jb775 » Thu, Nov 12, 2020, 10:16 PM UTC

You need to be playing the iPhone U2 album while opening each application for it to work

Re: macOS unable to open any non-Apple application

#170

Post by valuearb » Thu, Nov 12, 2020, 10:16 PM UTC

_iyig wrote: post #124

This is the reason I needed to switch to a Linux laptop. I cannot be beholden to Apple’s - or anyone’s - servers when it comes to running applications on my own machine. Any recommendations? I’ve heard good things about System76.

Linux performs similar checks.