{"id":112916,"date":"2020-11-16T14:42:15","date_gmt":"2020-11-16T11:42:15","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/apple-defends-the-role-of-gatekeeper-after-mac-app-opening-issue\/"},"modified":"2020-11-16T14:42:15","modified_gmt":"2020-11-16T11:42:15","slug":"apple-defends-the-role-of-gatekeeper-after-mac-app-opening-issue","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/apple-defends-the-role-of-gatekeeper-after-mac-app-opening-issue\/","title":{"rendered":"#Apple defends the role of Gatekeeper after mac app opening issue"},"content":{"rendered":"

“#App<\/a>le defends the role of Gatekeeper after mac app opening issue<\/strong>”
\n<\/p>\n

\n Last week, Apple released the much-awaited macOS Big Sur update for everyone. While everyone rushed to get a new update, folks who didn\u2019t update at that moment faced a peculiar problem: they couldn\u2019t open their apps<\/a>.<\/p>\n

It\u2019s a frustrating situation when you rely on your computer for work, but can\u2019t do anything because a server is messed up. That\u2019s right, as developer Jeff Johnson<\/a> noted, the issue was caused by Apple\u2019s Online Certificate Service Protocol (OCSP) server crashed \u2014 largely due to many users downloading the new update simultaneously.<\/p>\n

The OCSP server is responsible for authenticating digital certificates of all apps \u2014 both Apple and third-party. Apple calls this feature Gatekeeper, and the company claims it helps to prevent apps without valid certificates from opening to maintain user security.<\/p>\n

It doesn\u2019t matter if you\u2019ve downloaded your app from the App Store or not. So when users were trying to just open their apps, they had to wait for the OCSP server to authenticate the app for them, but they weren\u2019t getting any response. The easiest solution was to turn off the internet to launch apps. Apple evidently fixed the problem in a few hours.<\/p>\n

\n

Hey Apple users:<\/p>\n

If you’re now experiencing hangs launching apps on the Mac, I figured out the problem using Little Snitch.<\/p>\n

It’s trustd connecting to https:\/\/t.co\/FzIGwbGRan<\/a><\/p>\n

Denying that connection fixes it, because OCSP is a soft failure.<\/p>\n

(Disconnect internet also fixes.) pic.twitter.com\/w9YciFltrb<\/a><\/p>\n

\u2014 Jeff Johnson (@lapcatsoftware) November 12, 2020<\/a>\n<\/p><\/blockquote>\n

After the incident, security researcher Jeffery Paul<\/a> wrote a blog alleging that macOS sends app hashes to Apple every time you run them. He also accused the company of knowing your rough location. Later, developer Jacopo Jannone<\/a>\u00a0explained that the company doesn\u2019t really send hashes to servers every time you launch apps.<\/p>\n

In response, Apple has updated its support page called \u201cSafely open your apps\u201d by defending its Gatekeeper mechanism and said the company never collects users data for it:<\/p>\n

\nGatekeeper performs online checks to verify if an app contains known malware and whether the developer\u2019s signing certificate is revoked. We have never combined data from these checks with information about Apple users or their devices. We do not use data from these checks to learn what individual users are launching or running on their devices.<\/p>\n

Notarization checks if the app contains known malware using an encrypted connection that is resilient to server failures.\n<\/p><\/blockquote>\n

The Cupertino tech giant noted that next year it\u2019ll launch a project to reduce server dependencies and even give its users an option to opt-out of these security measures. We\u2019ll have to wait for the implementation to see how they act in real-life usage. Hopefully, we won\u2019t have to face the frustration of waiting for a server to authenticate an app that you downloaded and used plenty of times.<\/p>\n

For more gear, gadget, and hardware news<\/a> and reviews, follow Plugged on
\n Twitter<\/a> and
\n Flipboard<\/a>.
\n <\/i><\/p>\n

\n Published November 16, 2020 \u2014 11:42 UTC\n <\/p>\n<\/p><\/div>\n