←back to thread

2603 points mattsolle | 8 comments | | HN request time: 0s | source | bottom
Show context
alexanderchr ◴[] No.25075173[source]
My MacBook is basically unusable right now. This appears to be the reason. Is there any way to fix it without installing little snitch?

Edit: working as usual now, moments after i wrote this. But seriously Apple, how can you allow this to happen? Your services hanging should _never_ prevent my device from running things locally. This is seriously making me reconsider my next computer purchase.

replies(4): >>25075224 #>>25075226 #>>25075233 #>>25075741 #
FanaHOVA ◴[] No.25075233[source]
Turn off your internet, open the app, turn it back on.
replies(2): >>25075264 #>>25075869 #
nixpulvis ◴[] No.25075264[source]
I'm laughing so hard at this right now.

And people somehow still love their macs...

replies(2): >>25075691 #>>25079679 #
dwaltrip ◴[] No.25075691[source]
Because Windows is so much better?
replies(3): >>25075769 #>>25075779 #>>25075914 #
1. loeg ◴[] No.25075769{3}[source]
It doesn't have this particular failure mode, at least.
replies(1): >>25075889 #
2. valuearb ◴[] No.25075889[source]
Both Linux and Windows perform similar checks.
replies(6): >>25075947 #>>25075977 #>>25076024 #>>25076030 #>>25076331 #>>25079392 #
3. loeg ◴[] No.25075947[source]
I'm sure Linux (the kernel) does not. I don't know of any Linux distro that does, but, I'd be curious if you can point to specifics.

If you could point to any documentation of Windows performing app-start OCSP checks, I'd love to learn more (and recant my earlier statement).

4. vcxy ◴[] No.25075977[source]
I assure you my Linux machines do not.
5. Rebelgecko ◴[] No.25076024[source]
That's a rather extraordinary claim. It's really setting off my BS meter- Can you show us where the code is to do that in the Linux kernel?
6. renewiltord ◴[] No.25076030[source]
Do you know of a Wireshark filter that will reveal this on Ubuntu? What you're saying doesn't sound credible, but to incentivize, here's the bet:

If you can provide a Wireshark filter that will show a certificate check on a vanilla Ubuntu 20.04 system when the following commands are executed in a bash shell, then I will donate $25 to a charity of your choice. Commands follow:

    cat <<HEREDOC >/tmp/file.c
    #include <stdio.h>

    int main() {
      printf("Hello World");
      return 0;
    }
    HEREDOC
    gcc /tmp/file.c -o /tmp/app
    /tmp/app
7. heavyset_go ◴[] No.25076331[source]
No, Linux does not.

Linux does provide application-level and per-application security, as well as sandboxes, but they exist to help the user and the user has complete control over them and their system.

8. stevenhuang ◴[] No.25079392[source]
The comment you are replying to states other OS' do not have this failure mode so your response is quite the non-sequitur, nevermind of questionable veracity (linux).