<story><title>Does Apple really log every app you run? A technical look</title><url>https://blog.jacopo.io/en/post/apple-ocsp/</url></story><parent_chain><item><author>cute_boi</author><text>if they keep doing like this I will block their entire ASN .</text></item><item><author>josephcsible</author><text>&amp;gt; I never asked them to do that in the first place, so I&amp;#x27;ll be blocking it from now on.&lt;p&gt;Apple&amp;#x27;s working on making sure you can&amp;#x27;t block it. They already keep you from blocking their own traffic with Little Snitch and similar tools: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=24838816&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=24838816&lt;/a&gt;</text></item><item><author>ravenstine</author><text>&amp;gt; macOS does actually send out some opaque information about the developer certificate of those apps, and that’s quite an important difference on a privacy perspective.&lt;p&gt;Yes, and no.  If you&amp;#x27;re using software that the state deems to be subversive or &amp;quot;dangerous&amp;quot;, a developer certificate would make the nature of the software you are running pretty clear.  They don&amp;#x27;t have to know exactly which program you&amp;#x27;re running, but just enough information to put you on a list.&lt;p&gt;&amp;gt; You shouldn’t probably block ocsp.apple.com with Little Snitch or in your hosts file.&lt;p&gt;I never asked them to do that in the first place, so I&amp;#x27;ll be blocking it from now on.</text></item></parent_chain><comment><author>amelius</author><text>Or stop buying stuff that is broken-by-design in the first place.</text></comment>
<story><title>Does Apple really log every app you run? A technical look</title><url>https://blog.jacopo.io/en/post/apple-ocsp/</url></story><parent_chain><item><author>cute_boi</author><text>if they keep doing like this I will block their entire ASN .</text></item><item><author>josephcsible</author><text>&amp;gt; I never asked them to do that in the first place, so I&amp;#x27;ll be blocking it from now on.&lt;p&gt;Apple&amp;#x27;s working on making sure you can&amp;#x27;t block it. They already keep you from blocking their own traffic with Little Snitch and similar tools: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=24838816&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=24838816&lt;/a&gt;</text></item><item><author>ravenstine</author><text>&amp;gt; macOS does actually send out some opaque information about the developer certificate of those apps, and that’s quite an important difference on a privacy perspective.&lt;p&gt;Yes, and no.  If you&amp;#x27;re using software that the state deems to be subversive or &amp;quot;dangerous&amp;quot;, a developer certificate would make the nature of the software you are running pretty clear.  They don&amp;#x27;t have to know exactly which program you&amp;#x27;re running, but just enough information to put you on a list.&lt;p&gt;&amp;gt; You shouldn’t probably block ocsp.apple.com with Little Snitch or in your hosts file.&lt;p&gt;I never asked them to do that in the first place, so I&amp;#x27;ll be blocking it from now on.</text></item></parent_chain><comment><author>sneak</author><text>Apple is old enough that you need only block 17.&amp;#x2F;8: they have a class A(!).</text></comment>