4 ms·
> Apple doesn't seem to care that much about privacy applications of their OSes. If I remember correctly, macOS (iOS as well?) also sends information about the
by frankjr 3y ago
> Apple doesn't seem to care that much about privacy applications of their OSes.
If I remember correctly, macOS (iOS as well?) also sends information about the application you are launching back to Apple from time to time. It doesn't contain the application's name directly but it does contain information about the developer of the app (their certificate; multiple apps can technically share the same developer though). They do this to be able to prevent the app from launching in case the developer has been done something nefarious. Bonus points go to Apple for making these requests over plain text connections, no pesky TLS - let the whole network see!
- sneak 3y agoThat was probably from my website: https://sneak.berlin/20201112/your-computer-isnt-yours/ https://sneak.berlin/20201112/your-computer-isnt-yours/ Apple committed on April 30, 2021 to sending these revocation checks over a new encrypted protocol within one year. AFAIK that turned out to be a lie, as there have been two OS releases since then and plaintext OCSP remains a thing. https://support.apple.com/en-us/HT202491 https://support.apple.com/en-us/HT202491 ARM macOS also still gets boot tickets from the TSS server (which include permanent HW serials like chip ECID) via plaintext tcp/80 HTTP on every OS update.