←back to thread

2603 points mattsolle | 5 comments | | HN request time: 0.879s | source
Show context
submeta ◴[] No.25075156[source]
Unbelievable. When I read the tweet (tried to post here as well), I suddenly realized why my Mac was unresponsive an hour ago.

Here is another tweet that describes the problem in more detail:

https://mobile.twitter.com/llanga/status/1326989724704268289

> I am currently unable to work because macOS sends hashes of every opened executable to some server of theirs and when `trustd` and `syspolicyd` are unable to do so, the entire operating system grinds to a halt.

EDIT:

As others pointed out, I put this to my `/etc/hosts` file and refreshed it like so:

    sudo emacs /etc/hosts # add `0.0.0.0 ocsp.apple.com` 
    sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder # refresh hosts
replies(26): >>25075338 #>>25075481 #>>25075547 #>>25075666 #>>25075887 #>>25076053 #>>25076387 #>>25076568 #>>25076811 #>>25077902 #>>25077923 #>>25077940 #>>25079234 #>>25079856 #>>25079879 #>>25080093 #>>25080357 #>>25080370 #>>25080849 #>>25081772 #>>25081989 #>>25083938 #>>25087820 #>>25090415 #>>25090991 #>>25095226 #
read_if_gay_ ◴[] No.25075547[source]
I started panicking mildly thinking my drive was failing or something.

And just before this, I finally managed to fix Spotlight pegging one core at 100% constantly. Next thing, I reboot into a laggy system. macOS is my favorite OS, but the shit I put up with... it's basically an abusive relationship at this point.

replies(10): >>25075694 #>>25075845 #>>25075881 #>>25075908 #>>25076012 #>>25076608 #>>25079197 #>>25079319 #>>25080929 #>>25085281 #
auslegung ◴[] No.25075908[source]
> macOS is my favorite OS, but the shit I put up with...

Idk, the several Linux distros I’ve used recently, and Windows, have a much longer list of “shit _I_ put up with”

replies(6): >>25076146 #>>25076830 #>>25078156 #>>25078536 #>>25078842 #>>25085318 #
GordonS ◴[] No.25076146[source]
Can you really think of a single thing worse than this?
replies(6): >>25076730 #>>25077674 #>>25077851 #>>25077883 #>>25078777 #>>25079002 #
1. Thorrez ◴[] No.25079002[source]
My Lenovo Windows laptop came installed with malware that MITMed all my https connections and also allowed anyone else to MITM all my https connections.

https://en.wikipedia.org/wiki/Superfish#Lenovo_security_inci...

replies(1): >>25080570 #
2. GordonS ◴[] No.25080570[source]
That's terrible, but it's not the fault of the OS vendor; presumably such a malware could be distributed with any OS.
replies(1): >>25080951 #
3. pilsetnieks ◴[] No.25080951[source]
Ironically, it couldn't be with macOS, which this whole thread is about avoiding.
replies(2): >>25081612 #>>25090083 #
4. ric2b ◴[] No.25081612{3}[source]
It certainly could if Apple wanted to do the same thing that Lenovo did.
5. Thorrez ◴[] No.25090083{3}[source]
Would MacOS actually have prevented it? Would Superfish just have simply signed the binary? Sure it wouldn't have started up when the Apple servers are down, but that's a very small percent of the time.