News for hackers. Stuff that matters.

A comment on macOS has checked app signatures online for over 2 years.

Re:macOS has checked app signatures online for over 2 years by _dmd on Wednesday November 25, 2020 @10:11PM (#25216501)
What I find a lot scarier is that macOS seems to store your local user's password as a hash with Apple.

A few months ago I was signing in on my MacBook, and it asked me (assuming because I did not have a mobile number attached) for my Hackintosh local user's password to 2FA.

May be buried in the depths of the EULA, but I most definitely never agreed for my LOCAL account password to be uploaded to Apple.

At least signature checks can be blocked (for now) on a DNS level. What about my passwords?

[ Parent | on HN ]
Re:macOS has checked app signatures online for over 2 years by pram on Thursday November 26, 2020 @03:27AM (#25218045)
If you’re using iCloud then that’s coming from keychain. That’s how you can reset the local password with your Apple ID.
[ Parent | on HN ]
Re:macOS has checked app signatures online for over 2 years by _dmd on Thursday November 26, 2020 @06:33PM (#25224328)
Never been using iCloud, on any of my Apple devices
[ Parent | on HN ]