if doing a tool working everywhere is not already hard enough, some vendors decide to actively work against us and sneakily add backdoor functionality so that curl does not work the same way on their platforms. So now our documentation is wrong. But only if you use the curl bundled by Apple with macOS. If you get curl with homebrew on the same machine, it will act as documented..
Good to know! I generally build and install curl under #MacPorts with the gnutls variant. However, there is no variant that builds against Apple's flavor of LibreSSL. The default build may use the MacPorts version of LibreSSL, if installed in place of OpenSSL.
daniel, i respect and admire you for your considerate and respectful behavior, but would it be appropriate to point out the potential of unintended #mitm interception more clearly in this case? i mean, the title could also have been "apple does not want you to notice when you are being wiretapped", or do i miss any other precaution they took for this not to happen?
also, i find it shocking that i don't find this shocking any more… 🤯
@max I don't think anyone knows details about the check since the LibreSSL source code they use don't seem to be provided anywhere and Apple's brief comment about did not say a lot.
daniel:// stenberg://
in reply to daniel:// stenberg:// • • •rain 🌦️
in reply to daniel:// stenberg:// • • •David
in reply to daniel:// stenberg:// • • •Fingel
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Fingel • • •Schamschula
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Schamschula • • •Nils Goroll 🕊️
in reply to daniel:// stenberg:// • • •daniel, i respect and admire you for your considerate and respectful behavior, but would it be appropriate to point out the potential of unintended #mitm interception more clearly in this case?
i mean, the title could also have been "apple does not want you to notice when you are being wiretapped", or do i miss any other precaution they took for this not to happen?
also, i find it shocking that i don't find this shocking any more… 🤯
daniel:// stenberg://
in reply to Nils Goroll 🕊️ • • •Nils Goroll 🕊️
in reply to daniel:// stenberg:// • • •Björn Stenberg
in reply to daniel:// stenberg:// • • •manchicken moved!
in reply to daniel:// stenberg:// • • •kalvdans
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to kalvdans • • •daniel:// stenberg://
in reply to daniel:// stenberg:// • • •Apple curl security incident 12604 | Hacker News
news.ycombinator.comJevin Sweval
in reply to daniel:// stenberg:// • • •Maximilian Hils
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Maximilian Hils • • •