News for hackers. Stuff that matters.

A comment on Apple Reneged on OCSP Privacy. Parent comment

Re:Apple Reneged on OCSP Privacy by sneak on Thursday June 16, 2022 @07:06PM (#31772109)
No, the machine (if set to full security) needs a signed ticket from Apple specific to your hardware (ECID) to run. It's just like an iPhone/iPad in that regard. Disabling the internet means the update will fail.

Remember TinyUmbrella and backing up your SHSH blobs so that you could downgrade to previous OSes? It's that same API.

https://www.theiphonewiki.com/wiki/Tatsu_Signing_Server

[ Parent | on HN ]
Re:Apple Reneged on OCSP Privacy by lapcat on Thursday June 16, 2022 @07:12PM (#31772145)
> No, the machine (if set to full security) needs a signed ticket from Apple specific to your hardware (ECID) to run.

Thanks. I see now that it's somewhat documented by Apple, except the plaintext aspect. So it seems that "Reduced Security" would be the workaround.

https://support.apple.com/guide/security/startup-disk-securi...

[ Parent | on HN ]