Live data from Hacker News

macOS unable to open any non-Apple application

twitter.com

991–1000 of 1001 posts

Re: macOS unable to open any non-Apple application

#991

So many comments in here, but I haven't seen a single one mentioning a simple solution: Vote with your feet. For years now, I've seen a large portion of the HN crowd praising Apple for its (alleged) respect of privacy and cursing at Microsoft for Windows "calling home" all the time. Now that this has happened, the only comments I see are "heads should roll", and "we must complain and be heard by high-level execs", bu…

Many complain, few will act. Virtue signalling about Windows is zero cost, unless one is a Windows user. Most people just don't care about privacy enough to do anything (ANY thing) inconvenient.

Re: macOS unable to open any non-Apple application

#992

Earlier quoted context omitted.

It's just sad that we don't have the corresponding form factor in a similar laptop. The biggest draw of mac: 1. slim, light 2. long battery life. 3. track pad. That's all I want, but nobody else offers it on the same spec, the difference is even bigger with M1.

I think Razer would satisfy those 3 criteria. Razer is known for their line of high-end laptops with comparable design and arguably better specifications than the MacBook line. They are mainly marketed to gamers, but could easily double as development workstations. There's even a pretty well-maintained set of Razer hardware drivers for linux ( https://openrazer.github.io/#project ).

They also have the cloud connected peripherals bullshit. Probably best to avoid Razer, if you want your expensive xmas light to work as a mouse even when you happen to be offline.

Re: macOS unable to open any non-Apple application

#993

Earlier quoted context omitted.

How is this not congruent with strong privacy protections? Your iPhone knows everywhere you’ve been, but when it sends that info to Apple it doesn’t include any personally identifiable information.

Strong privacy would be not sending that information to Apple at all . (Do iPhones really send the current location to Apple?)

Maps does for sure, it’s how they build traffic measures. They need to know how many (relatively) are using specific routes, but have no need to know who.

Another case is WiFi mapping. Your phone helps build a database of WiFi network locations to improve your location accuracy, again they don’t need your personal identity to build that.

Re: macOS unable to open any non-Apple application

#994

Sincerely and without any intention to troll or be sarcastic: I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view. Even beyond unintentional glitches at Apple, just ima…

All in all, this appears to be a design fuck-up of monumental proportions. One that might very well deserve to have serious legal ramifications for Apple. Apple gave a detailed explanation. It was a server misconfiguration combined with a CDN issue which caused the OCSP certificate check to stop working, which caused Apple's system for ensuring certificates haven't been revoked to stop working: “We have never combine…

not only do I see fewer macbooks every year among the affluent crowd…

Turns our Apple's MacBook business grew 39% last quarter: https://appleinsider.com/articles/20/11/16/apples-macbook-bu...

Re: macOS unable to open any non-Apple application

#995
post #988

Earlier quoted context omitted.

ocsp.apple.com also has an IPv6 address. Firefox connects to it even with 0.0.0.0 in the hosts file and a flushed cache (you need to also clear firefox's internal cache if you're testing with it), so I'd assume that trustd could connect to the ocsp site as well. I don't think this will work without ensuring there is no IPv6 traffic on your network, or otherwise dumping both IPv4 and v6 packets to ocsp.apple.com. Disa…

Can you not just add an IPv6 entry for it in your hosts file, e.g., ::1? That would work in Linux and seems like a much less nuclear option than disabling ipv6 all together, but admittedly I've never worked with ipv6 networking on Macs. Last time I played with a Mac they also had the BSD `ipfw` command for kernel packet filtering [1]. Could try something there if it still exists. [1]: https://www.unix.com/man-page/Fr…

Just to confirm: Yes, that works fine. It's probably the better solution here.

Re: macOS unable to open any non-Apple application

#997

Earlier quoted context omitted.

The server is called OSCP which suggests to me that if we look at Apple in the most positive light - they sign and certify binaries as safe. If an app gets later reported as malicious, they need to revoke the certificate that has been used to sign said binary. So when you open an app, how else are they going to check whether the certificate is still valid or whether it has been revoked? Can anyone confirm whether thi…

Here's a wild idea: don't block executables from running. Or if you do, only do it for a set of known bad ones, as antivirus products do. Do not put a cloud service (or anything for that matter) between the users and their ability to run what they want.

Sure but how does that work? If a cert-revoked app is allowed to run, the damage is already done.

I think perhaps a better tradeoff would be if a revocation list could be synced hourly or so and the app could be checked sync locally and then asyncronously on open. And of course, always give the power user an option to ignore things.

Re: macOS unable to open any non-Apple application

#998
post #820

Earlier quoted context omitted.

The server is called OSCP which suggests to me that if we look at Apple in the most positive light - they sign and certify binaries as safe. If an app gets later reported as malicious, they need to revoke the certificate that has been used to sign said binary. So when you open an app, how else are they going to check whether the certificate is still valid or whether it has been revoked? Can anyone confirm whether thi…

Here's an idea: log all opened binaries somewhere and then every hour or so check them against the list. Never block me from opening something, but warn me about bad stuff on a regular basis.

Yes but with your solution if an app is malicious, and did malicious things, it now has a whole hour to fuck your shit up before being disabled.

Re: macOS unable to open any non-Apple application

#999
post #839

Earlier quoted context omitted.

See also: all electric vehicles (except a few very old designs).

Tesla is not all electric vehicles. My Twizy and Ioniq haven't got a single touch of data gathering neither a SIM card/wifi connectivity.

Yeah those are golf carts.

Re: macOS unable to open any non-Apple application

#1000

Earlier quoted context omitted.

God the self importance of this community. The world can live without the 1000 people here.

The interesting thing about this community is that technically it could create its own OS. That is a threat to nation state level institutes that want to prevent that.

Yes, nation states fear people working on OS projects. No one outside of the security state has ever tried to make one - and lived to tell the tale.
Post reply on HN