Live data from Hacker News

Does Apple really log every app you run? A technical look

blog.jacopo.io

291–300 of 355 posts

Re: Does Apple really log every app you run? A technical look

#291

Earlier quoted context omitted.

Well, you can block it. You need disable SIP and edit a plist.

And then you need to do it again for every update you receive and create a new signature etc.

Not really the question I asked. Also keep in mind that when you disabled SIPs in 10.15, none of the, at least minor, upgrades, reverted the change.

Re: Does Apple really log every app you run? A technical look

#292

Earlier quoted context omitted.

And then you need to do it again for every update you receive and create a new signature etc.

Not really the question I asked. Also keep in mind that when you disabled SIPs in 10.15, none of the, at least minor, upgrades, reverted the change.

GP didn’t reply to your comment, they replied to mine. :)

Re: Does Apple really log every app you run? A technical look

#293
post #40

Earlier quoted context omitted.

I feel Apple has done privacy well in so many cases, that the way this works is really disappointing :-/

Apple has done a fantastic PR job regarding privacy. I am more skeptical about the status of actual privacy given their iMessage situation and now this.

[deleted]

Re: Does Apple really log every app you run? A technical look

#294

Earlier quoted context omitted.

Well, you can block it. You need disable SIP and edit a plist.

And then you need to do it again for every update you receive and create a new signature etc.

I guess we’ll have to see if the file gets reverted in updates. I don’t think that’s a given?

I too am not happy about the root snapshot thing...

Re: Does Apple really log every app you run? A technical look

#295

Earlier quoted context omitted.

Privately owned companies are not accountable to their users, they are accountable to their owners, just like publically traded ones. It's just that they have fewer owners, and you sometimes get owners with really nice ideas. Other times, you get even more tyrannical owners. Instead, what would be really nice is imagining how those companies would fare as worker-owned companies. Especially with these big internet beh…

Or not, as Soviet Union with its workers-owned factories can tell. Ever rode a Soviet car that wasn’t copypasted from Fiat?

The Soviet Union didn't have even 1 worker owned factory, unless you're talking about the time before Lenin ever came to power. The factories were owned by the state, which in turn was owned by a dictator and his political apparatus - workers had less freedom to control the factory than Amazon warehouse workers.

Re: Does Apple really log every app you run? A technical look

#296

Earlier quoted context omitted.

We’ve been hearing that for years, yet it hasn’t happened. Apple seems to recognize the value of the Mac as an general computing platform.

Apple has programmed macOS to make it appear to users as if un-Notarized apps either don't work or are malicious. This is bad for users that download apps to solve problems, or to get work done, because then they can't those apps without having an expert tell them what the magic ritual to run un-Notarized apps is. If they don't have an expert around to show them how to perform the magic ritual, then they just think t…

I don't think anyone trying to 'solve problems' or 'get work done' has encountered a notarization issue since the types of software they use is always notarized (since they still are only running software distributed by million dollar corporations).

Re: Does Apple really log every app you run? A technical look

#297

Earlier quoted context omitted.

Yes it is ridiculous that an internet query is in the path of starting a local app for the first time in X hours. If it has to be done, it could be done in a daily batch for all apps when the connection is idle, and on install. Using bloom filters to check for recent invalidations would be even better.

How many false positives are possible with bloom filters? In the described use case, you don’t want even one.

A positive on on the bloom filter is just an indicator that you do the bigger, more expensive (and privacy-reducing) check, like an encrypted OCSP query for that specific certificate. It's not the final verdict, specifically because of the risk of false positives. Bloom filters are a way of making it so that you don't have to do that bigger, privacy-leaking query every time.

Re: Does Apple really log every app you run? A technical look

#298

Earlier quoted context omitted.

Or not, as Soviet Union with its workers-owned factories can tell. Ever rode a Soviet car that wasn’t copypasted from Fiat?

The Soviet Union didn't have even 1 worker owned factory, unless you're talking about the time before Lenin ever came to power. The factories were owned by the state, which in turn was owned by a dictator and his political apparatus - workers had less freedom to control the factory than Amazon warehouse workers.

But they told people they had been worker-owned, and many actually believed it!

Re: Does Apple really log every app you run? A technical look

#299

There will be a day when all apps on a mac will only be installable from the app store. Developers will be forced to buy macs and subscribe to Apple’s developer program to support it. Customers will be trained to not care. And HN Apple fanboys and fangirls will try to justify why this is a Good Thing(TM).

We’ve been hearing that for years, yet it hasn’t happened. Apple seems to recognize the value of the Mac as an general computing platform.

The water is warm but it isn't boiling yet. All the infra is in place though, and the economic incentives are inevitably going to push Apple in this direction.
Post reply on HN