{"id":35383,"date":"2022-03-25T14:46:54","date_gmt":"2022-03-25T18:46:54","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=35383"},"modified":"2022-03-24T14:47:01","modified_gmt":"2022-03-24T18:47:01","slug":"how-to-launch-mac-apps-in-private","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2022\/03\/25\/how-to-launch-mac-apps-in-private\/","title":{"rendered":"How to Launch Mac Apps in Private"},"content":{"rendered":"<p><a href=\"https:\/\/eclecticlight.co\/2021\/02\/23\/how-to-run-apps-in-private\/\">Howard Oakley<\/a>:<\/p>\n<blockquote cite=\"https:\/\/eclecticlight.co\/2021\/02\/23\/how-to-run-apps-in-private\/\">\n<p>If you&rsquo;re unfortunate enough to have to use your Mac in a part of the world where surveillance is performed, even knowing when you use certain apps could prove to your great disadvantage. This article looks at two potential solutions: blocking all outgoing traffic to Apple&rsquo;s OCSP service, which checks certificates against its list of revocations, and removing code signatures on selected apps.<\/p>\n<p>[&#8230;]<\/p>\n<p>By blocking outgoing connections to ocsp.apple.com and ocsp2.apple.com app launch should still proceed, usually more quickly too, without the check taking place. The great disadvantage is that blocking is all-or-none, and can&rsquo;t be selective according to the app being launched. This forces the user into choosing between normal revocation checks, or none at all.<\/p>\n<p>[&#8230;]<\/p>\n<p>Checks on certificate revocation can only be made on apps which are signed. If the app is unsigned, there&rsquo;s no signing certificate to check. Use this to your advantage by removing the signature from those apps whose use you want to make private[&#8230;]<\/p>\n<\/blockquote>\n<p>However, I think some Apple services will not work with apps that are unsigned or ad-hoc signed.<\/p>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2022\/03\/14\/still-no-preference-to-opt-out-of-ocsp\/\">Still No Preference to Opt Out of OCSP<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/11\/13\/apple-server-outage-makes-mac-apps-hang-on-launch\/\">Apple Server Outage Makes Mac Apps Hang on Launch<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/08\/19\/apple-silicon-macs-to-require-signed-code\/\">Apple Silicon Macs to Require Signed Code<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Howard Oakley: If you&rsquo;re unfortunate enough to have to use your Mac in a part of the world where surveillance is performed, even knowing when you use certain apps could prove to your great disadvantage. This article looks at two potential solutions: blocking all outgoing traffic to Apple&rsquo;s OCSP service, which checks certificates against its [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2022-03-25T18:46:59Z","apple_news_api_id":"14279871-dbdf-4f65-9148-a05319e10f1c","apple_news_api_modified_at":"2022-03-25T18:47:00Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/AFCeYcdvfT2WRSKBTGeEPHA","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[139,30,2077,476,355,48],"class_list":["post-35383","post","type-post","status-publish","format-standard","hentry","category-technology","tag-littlesnitch","tag-mac","tag-macos-12","tag-networking","tag-privacy","tag-security"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/35383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=35383"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/35383\/revisions"}],"predecessor-version":[{"id":35384,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/35383\/revisions\/35384"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=35383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=35383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=35383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}