Live data from Hacker News

macOS unable to open any non-Apple application

twitter.com

301–310 of 1001 posts

Re: macOS unable to open any non-Apple application

#303

Earlier quoted context omitted.

Wait what happens if you don't have an internet connection? Can Macs not be used offline any more, surely that's still a relatively common use case for a laptop even today in a lot of places?

My understanding is that if you're offline, it skips this check and everything works fine. The reason this is a big deal is that the problem's on their end, so you're not offline, so it keeps trying and waiting instead of just letting you skip the check.

That still seems weird. Why does running unrecognized software become safe when you're off line?

Re: macOS unable to open any non-Apple application

#304
post #132

Earlier quoted context omitted.

If my employer offered anything for Linux use than a 10lb Dell laptop I would consider it. I primarily choose MacBooks because I know what to expect in terms of hardware.

Aren't Dell XPS laptops considered pretty good for Linux? I use desktops 99% of the time (it's more ergonomic), but I have an old XPS for occasional travel.

XPS Laptops are also expensive so the employer might not offer them as an option.

Re: macOS unable to open any non-Apple application

#305

Sincerely and without any intention to troll or be sarcastic: I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view. Even beyond unintentional glitches at Apple, just ima…

And I keep hearing how Linux is a toy whereas macOS 'just works'.

A lot of it is just people parroting the same old boring tropes. They couldn't believe Linux had gotten easier to use than windows. I know this. I installed Windows few days ago. I can't install steam or chromium without getting blocked by windows. I have to download it from external sites while both of these are available in the software store on Ubuntu. It didn't nag me to login, switched my browser to edge after updates, forced me to read a marketing manual before starting the OS.

The search is useless. On Linux, it's so much better.

I had to download and run a bunch of scripts to get rid of the amount of data it was sending back home. I had to remove the bloat and ads it came with.

Give https://pop.system76.com/ a try if you don't believe that Linux is easier to use. Most people don't need to open the terminal anymore.

Re: macOS unable to open any non-Apple application

#306
All of my personal Macs became unusable about an hour ago. Fan would kick up, CPU gets loaded, and every operation comes to a crawl. Thankfully it seems a PRAM and SMC reset solved the issue. Wondering if what's going on here is related. It would be quite the coincidence if not.

Re: macOS unable to open any non-Apple application

#307

Sincerely and without any intention to troll or be sarcastic: I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view. Even beyond unintentional glitches at Apple, just ima…

> I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view.

The answer is pretty simple: these problems are extremely rare, they don't last very long, and they tend to have fairly simple workarounds. You seem to have a principle that any non-zero chance of being affected by a problem of a certain type is a complete deal-breaker, but most people when buying a computer probably just subconsciously estimate the likelihood and impact of this type (and all other types) of problems and weigh that against other unrelated factors like price.

Re: macOS unable to open any non-Apple application

#308
post #113

Earlier quoted context omitted.

Can apple not use security certificates to verify publishers ? why does it need to go to their servers ?

The URL mentioned in sibling comments suggests this has to do with certificate revocation (OCSP): https://en.wikipedia.org/wiki/Online_Certificate_Status_Prot... I agree that breaking system availability when an OCSP server isn't available is user-hostile and unnecessary.

> I agree that breaking system availability when an OCSP server isn't available is user-hostile and unnecessary.

Based on the OP tweet... depending on the way it is unavailable, the failure is indeed ignored in some cases. "Denying that connection fixes it, because OCSP is a soft failure (Disconnect internet also fixes.)"

So it may be an actual unintended bug that a particular failure path results in a DoS instead?

Re: macOS unable to open any non-Apple application

#309

Sincerely and without any intention to troll or be sarcastic: I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view. Even beyond unintentional glitches at Apple, just ima…

The alternative to a poor binary checking and cert revocation process isn't to get rid of binary signing and cert revocation.

I don't want that. I don't think it would serve Apple's customers to get rid of binary signing either.

Since there are no legal ramifications for security bugs that cause downtime, or for bugs that cause other functionality that goes down, I'm not sure why this particular bug would be any different. It's certainly not as bad as losing one's Google account permanently without recourse.

Re: macOS unable to open any non-Apple application

#310
post #268

Earlier quoted context omitted.

> don’t get a ping back in less than 500ms or whatever? Go ahead and open anyway how do you do that without defeating the security? Now a malicious attacker just has to wait for a moment when you aren't connected before launching their payload.

The feature needs to be implemented using some kind of regularly updated local database, rather than requiring a phone home every time.

A local database with a hash of every possible non-official Apple app in it? Sounds like something maybe only storage manufacturers will like.

The thing is, this is not a new security problem/challenge. It essentially can not be properly solved if you don't have a tightly controlled environment. If it's a general purpose environment, where you can't fully control what ends up running on it, this particular approach to "security" is pretty much doomed, no matter how you address it.

Post reply on HN