News for hackers. Stuff that matters.
Re:Apple Reneged on OCSP Privacy by lapcat on Thursday June 16, 2022 @06:56PM (#31772039)
> each Mx macOS update phones home a) in plaintext and b) with hardware unique identifiers (your ARM's ECID) on every single OS update

Question about this article: At what point exactly during the update process does this happen?

As a workaround, could one do softwareupdate --download from Terminal, turn off your internet connection, and then do softwareupdate --install?

Re:Apple Reneged on OCSP Privacy by sneak on Thursday June 16, 2022 @07:06PM (#31772109)
No, the machine (if set to full security) needs a signed ticket from Apple specific to your hardware (ECID) to run. It's just like an iPhone/iPad in that regard. Disabling the internet means the update will fail.

Remember TinyUmbrella and backing up your SHSH blobs so that you could downgrade to previous OSes? It's that same API.

https://www.theiphonewiki.com/wiki/Tatsu_Signing_Server

Re:Apple Reneged on OCSP Privacy by lapcat on Thursday June 16, 2022 @07:12PM (#31772145)
> No, the machine (if set to full security) needs a signed ticket from Apple specific to your hardware (ECID) to run.

Thanks. I see now that it's somewhat documented by Apple, except the plaintext aspect. So it seems that "Reduced Security" would be the workaround.

https://support.apple.com/guide/security/startup-disk-securi...

Re:Apple Reneged on OCSP Privacy by callmeal on Thursday June 16, 2022 @07:03PM (#31772086)
It's easy for the os to stack up the updates and the push everything once the network is back up.

See:

https://sneak.berlin/20210202/macos-11.2-network-privacy/