Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> i.e. it doesn't "fail safe" by disallowing execution if the check doesn't go through. (If it did, you wouldn't be able to run anything without an internet connection!) Instead, these checks can pass, fail, or error out; and erroring out is the same as passing. (Or rather, technically, erroring out falls back to the last cached verification state, even if it's expired; but if there is no previous verification state — e.g. if it's your first time running third-party app and you're doing so offline — then the fallback-to-the-fallback is allowing the app to run.)

https://www.sentinelone.com/blog/what-happened-to-my-mac-app...

> Last week, just after we covered the release of Big Sur, many macOS users around the world experienced something unprecedented on the platform: a widespread outage of an obscure Apple service caused users worldwide to be unable to launch 3rd party applications.



Scroll down a little further on your link for confirmation of what the parent said:

> As was well-documented over the weekend, trustd employs a “fail-soft” call to Apple’s OCSP service: If the service is unavailable or the device itself is offline, trustd (to put it simply) goes ahead and “trusts” the app.

Even at the time people quickly figured out you could just disconnect from the internet as a workaround until the issue was fixed.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: