> its ‘software update brain’ calls for the second download, whose size is written only in the log This is also when it personalizes its boot signature (ticket

> its ‘software update brain’ calls for the second download, whose size is written only in the log This is also when it personalizes its boot signature (ticket) for your specific CPU via the TSS server. This is done by transmitting your ECID (a hardware serial number for your CPU) to Apple. This is done over unencrypted plaintext port 80, allowing anyone who is passively monitoring all internet backbone traffic to associate that (and every other!) serial number with the client IP (and thus city level location). It also permits Apple to associate every ECID with a client IP and city level geolocation (and timestamp). I have reported this behavior to Apple on multiple occasions and yet the plaintext transmission continues. Apple does not permit apps in the App Store that behave like this, but Apple's own insecure boot loader updater is exempt from this security policy apparently. https://sneak.berlin/20220409/apple-is-still-tracking-you-without-consent/ https://sneak.berlin/20220409/apple-is-still-tracking-you-wi...