←back to thread

2603 points mattsolle | 8 comments | | HN request time: 0s | source | bottom
Show context
modeless ◴[] No.25075336[source]
You've got to be kidding me. When Apple's servers are down, all Macs worldwide start freezing randomly? My XCode is hanging during builds, is this why?

This code signing enforcement stuff has gone way too far. Heads should roll for this.

replies(7): >>25075369 #>>25075380 #>>25075549 #>>25075960 #>>25076693 #>>25079741 #>>25080072 #
p1necone ◴[] No.25075549[source]
Wait what happens if you don't have an internet connection? Can Macs not be used offline any more, surely that's still a relatively common use case for a laptop even today in a lot of places?
replies(7): >>25075778 #>>25075945 #>>25076204 #>>25078280 #>>25078541 #>>25081169 #>>25083116 #
josephcsible ◴[] No.25075778[source]
My understanding is that if you're offline, it skips this check and everything works fine. The reason this is a big deal is that the problem's on their end, so you're not offline, so it keeps trying and waiting instead of just letting you skip the check.
replies(3): >>25075909 #>>25076399 #>>25076495 #
1. berryg ◴[] No.25076495[source]
I experienced this a couple of weeks ago. My wifi was up, but my internetprovider was down. My Macbook came to a halt. Nothing worked anymore. The whole machine was extremely slow. When the internetprovider came back up again, everything was fine again.
replies(2): >>25077853 #>>25078261 #
2. kps ◴[] No.25077853[source]
So you can't use a computer on an airgapped network? That seems counterproductive if the objective is security.
replies(1): >>25077877 #
3. floatingatoll ◴[] No.25077877[source]
If your computer is actually airgapped and has no networking interfaces configured, you won't have this issue.

If your computer is able to resolve DNS for ocsp.apple.com but to connection-timeout all traffic, yes, you could possibly reproduce today's issue.

replies(1): >>25078423 #
4. aunty_helen ◴[] No.25078261[source]
Had the same thing earlier in the week as the isp was doing maintenance two nights in a row. 5+ seconds to start sublime and other really basic apps. Apple apps had no problem of course.

Remembering the notarization problems people were having months ago I did some tests and confirmed.

Now have little snitch installed again and my laptops going to be an Apple orphan. So I never noticed this problem today by virtue of it pissing me off 2 days before.

replies(1): >>25079331 #
5. kps ◴[] No.25078423{3}[source]
Airgapped network — an IP LAN not connected to the internet. These do exist, sometimes permanently for security reasons, and sometimes just where external connectivity sucks but you still want your laptop to talk to your NAS.
replies(2): >>25079265 #>>25080545 #
6. justinclift ◴[] No.25079265{4}[source]
Agreed. These are really useful in various settings, but seem to be outside of most people's experience.
7. hackerfromthefu ◴[] No.25079331[source]
Might as well get a chromebook then hahaha
8. floatingatoll ◴[] No.25080545{4}[source]
The point stands: if you allow a host to resolve ocsp.apple.com to an unresponsive (timeout) address, it might break macOS the same as today — whether by air gap, by firewall, or who knows what else.