TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Apple OSes Are Insecure by Design to Aid Surveillance

18 pointsby keybitsover 1 year ago

3 comments

lcnPylGDnU4H9OFover 1 year ago
&gt; Apple committed in writing a few major versions (i.e. ~3 years ago) to providing a preference setting for disabling online OCSP checks in macOS when I made a stink about it, within one year. Not only did this not happen within a year (a rare instance of Apple actually outright lying), but someone was kind enough to write me and tell me that <i>Apple has edited the webpage to remove this promise</i>. (emphasis mine)<p><a href="https:&#x2F;&#x2F;support.apple.com&#x2F;en-us&#x2F;HT202491" rel="nofollow noreferrer">https:&#x2F;&#x2F;support.apple.com&#x2F;en-us&#x2F;HT202491</a><p>Fortunately an older version was archived: <a href="https:&#x2F;&#x2F;archive.ph&#x2F;yhThW" rel="nofollow noreferrer">https:&#x2F;&#x2F;archive.ph&#x2F;yhThW</a><p>I believe the part that was removed is near the bottom:<p>&gt; In addition, over the the next year we will introduce several changes to our security checks:<p>&gt; - A new encrypted protocol for Developer ID certificate revocation checks<p>&gt; - Strong protections against server failure<p>&gt; - A new preference for users to opt out of these security protections<p>Definitely a curious turn of events.
xt00over 1 year ago
Honestly if you really want this fixed, just sniff the app usage traffic from a few celebrities and publish online. It will be fixed quickly.
orangesiteover 1 year ago
Damning.