So many comments in here, but I haven't seen a single one mentioning a simple solution: Vote with your feet. For years now, I've seen a large portion of the HN crowd praising Apple for its (alleged) respect of privacy and cursing at Microsoft for Windows "calling home" all the time. Now that this has happened, the only comments I see are "heads should roll", and "we must complain and be heard by high-level execs", bu…
macOS unable to open any non-Apple application
991–1000 of 1001 posts
Re: macOS unable to open any non-Apple application
#992Earlier quoted context omitted.
It's just sad that we don't have the corresponding form factor in a similar laptop. The biggest draw of mac: 1. slim, light 2. long battery life. 3. track pad. That's all I want, but nobody else offers it on the same spec, the difference is even bigger with M1.
I think Razer would satisfy those 3 criteria. Razer is known for their line of high-end laptops with comparable design and arguably better specifications than the MacBook line. They are mainly marketed to gamers, but could easily double as development workstations. There's even a pretty well-maintained set of Razer hardware drivers for linux ( https://openrazer.github.io/#project ).
Re: macOS unable to open any non-Apple application
#993Earlier quoted context omitted.
How is this not congruent with strong privacy protections? Your iPhone knows everywhere you’ve been, but when it sends that info to Apple it doesn’t include any personally identifiable information.
Strong privacy would be not sending that information to Apple at all . (Do iPhones really send the current location to Apple?)
Another case is WiFi mapping. Your phone helps build a database of WiFi network locations to improve your location accuracy, again they don’t need your personal identity to build that.
Re: macOS unable to open any non-Apple application
#994Sincerely and without any intention to troll or be sarcastic: I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view. Even beyond unintentional glitches at Apple, just ima…
All in all, this appears to be a design fuck-up of monumental proportions. One that might very well deserve to have serious legal ramifications for Apple. Apple gave a detailed explanation. It was a server misconfiguration combined with a CDN issue which caused the OCSP certificate check to stop working, which caused Apple's system for ensuring certificates haven't been revoked to stop working: “We have never combine…
Turns our Apple's MacBook business grew 39% last quarter: https://appleinsider.com/articles/20/11/16/apples-macbook-bu...
Re: macOS unable to open any non-Apple application
#995Earlier quoted context omitted.
ocsp.apple.com also has an IPv6 address. Firefox connects to it even with 0.0.0.0 in the hosts file and a flushed cache (you need to also clear firefox's internal cache if you're testing with it), so I'd assume that trustd could connect to the ocsp site as well. I don't think this will work without ensuring there is no IPv6 traffic on your network, or otherwise dumping both IPv4 and v6 packets to ocsp.apple.com. Disa…
Can you not just add an IPv6 entry for it in your hosts file, e.g., ::1? That would work in Linux and seems like a much less nuclear option than disabling ipv6 all together, but admittedly I've never worked with ipv6 networking on Macs. Last time I played with a Mac they also had the BSD `ipfw` command for kernel packet filtering [1]. Could try something there if it still exists. [1]: https://www.unix.com/man-page/Fr…
Re: macOS unable to open any non-Apple application
#996Re: macOS unable to open any non-Apple application
#997Earlier quoted context omitted.
The server is called OSCP which suggests to me that if we look at Apple in the most positive light - they sign and certify binaries as safe. If an app gets later reported as malicious, they need to revoke the certificate that has been used to sign said binary. So when you open an app, how else are they going to check whether the certificate is still valid or whether it has been revoked? Can anyone confirm whether thi…
Here's a wild idea: don't block executables from running. Or if you do, only do it for a set of known bad ones, as antivirus products do. Do not put a cloud service (or anything for that matter) between the users and their ability to run what they want.
I think perhaps a better tradeoff would be if a revocation list could be synced hourly or so and the app could be checked sync locally and then asyncronously on open. And of course, always give the power user an option to ignore things.
Re: macOS unable to open any non-Apple application
#998Earlier quoted context omitted.
The server is called OSCP which suggests to me that if we look at Apple in the most positive light - they sign and certify binaries as safe. If an app gets later reported as malicious, they need to revoke the certificate that has been used to sign said binary. So when you open an app, how else are they going to check whether the certificate is still valid or whether it has been revoked? Can anyone confirm whether thi…
Here's an idea: log all opened binaries somewhere and then every hour or so check them against the list. Never block me from opening something, but warn me about bad stuff on a regular basis.
Re: macOS unable to open any non-Apple application
#999Re: macOS unable to open any non-Apple application
#1000Earlier quoted context omitted.
God the self importance of this community. The world can live without the 1000 people here.
The interesting thing about this community is that technically it could create its own OS. That is a threat to nation state level institutes that want to prevent that.