News for hackers. Stuff that matters.
Re:Ask HN: Is Apple really phoning home every time I start a... by __d on Friday June 11, 2021 @09:20PM (#27480477)
It's kinda true.

I think macOS will check that the developer certificate used to sign the application you're about to start hasn't been revoked.

Search for ocsp.apple.com, around November 2020, for details.

Re:Ask HN: Is Apple really phoning home every time I start a... by mahathu on Friday June 11, 2021 @09:26PM (#27480523)
I found this related HN thread: https://news.ycombinator.com/item?id=25076588

I wonder why this didn't blow up more, it sounds like such a privacy nightmare.

Re:Ask HN: Is Apple really phoning home every time I start a... by __d on Friday June 11, 2021 @09:38PM (#27480594)
Yeah.

For me, I accept that there's a tradeoff between being able to revoke the signed status of an application, and doing a certificate check at launch time.

And you're already trusting Apple with a bunch of stuff, so one more thing isn't that much worse.

But yeah, it's still creepy, and ripe for abuse.