Live data from Hacker News

macOS unable to open any non-Apple application

twitter.com

41–50 of 1001 posts

Re: macOS unable to open any non-Apple application

#41
post #2

Unbelievable. When I read the tweet (tried to post here as well), I suddenly realized why my Mac was unresponsive an hour ago. Here is another tweet that describes the problem in more detail: https://mobile.twitter.com/llanga/status/1326989724704268289 > I am currently unable to work because macOS sends hashes of every opened executable to some server of theirs and when `trustd` and `syspolicyd` are unable to do so,…

Note that it's ocsp.apple.com, not oSCp.apple.com.

Re: macOS unable to open any non-Apple application

#43
post #33

Maybe it's just me but the idea that my computer lets Apple (+ any LE organizations) surveil my app launches seems so much scarier than any malware.

I don't know about you, but hashes of the binaries I run don't exactly reveal any sensitive personal information about me. That said, obviously they should have much more graceful degradation in place for when something is wrong with the service.

Re: macOS unable to open any non-Apple application

#46
post #33

Maybe it's just me but the idea that my computer lets Apple (+ any LE organizations) surveil my app launches seems so much scarier than any malware.

Is this the one-time signature checking that has been in place since Catalina, or is this something else? (And if so is there any information about it?)

Re: macOS unable to open any non-Apple application

#50
post #33

Maybe it's just me but the idea that my computer lets Apple (+ any LE organizations) surveil my app launches seems so much scarier than any malware.

I don't know about you, but hashes of the binaries I run don't exactly reveal any sensitive personal information about me. That said, obviously they should have much more graceful degradation in place for when something is wrong with the service.

In this case, isn't the hash of the binary consistent across all devices, so Apples can in fact derive exactly which binary you're running (assuming they have a large database of application binary and hashes)?
Post reply on HN