Apparently you can set ocsp.apple.com to 127.0.0.1 in your /etc/hosts

This is really terrible, but at least the workaround is simple.

System76 is pretty great and they have amazing customer support. Plus between ProtonDB / Lutris you can run pretty much anything you want that needed Windows before.

https://system76.com/laptops

I use and love Linux, but come on man, that kind of statement does not help. Even with proton and friends, wine is not perfect. There will most likely be problems, and it's not a one to one transition. However, in my opinion, it is worth it, but there's no sense pretending there is no cost.

It's certainly not perfect, but it's good. If Windows-specific stuff is what's keeping someone from Linux, I'd encourage them to at least see if it works in Wine.

If you're willing to use Windows, honestly one of the better solutions today is to just run Windows 10 in a VM. It's even feasible to do this for video games with VFIO.

Given that they're using a MacBook they probably aren't using very much Windows specific software if any, so I don't know that Wine would be much of a factor.

Add the `127.0.0.1 ocsp.apple.com` line to your /etc/hosts file.

Thank you, this fixed it for me. (What a mess!)

Turn off your internet, open the app, turn it back on.

I'm laughing so hard at this right now.

And people somehow still love their macs...

Yeah because we’ve never seen windows or linux users have to perform crazy workarounds right.

Users should not put up with this kind of thing, no matter what OS. Forced updates, online startup checks...all unacceptable in my opinion.

Imagine no car or train in the region starting because of a server outage. People would riot on the streets. But for some reason in the IT world this kind of crap is marketed as a feature.

I agree! I would love that.

However... Where can I buy a computer free of all of those issues?

Linux? At least then it's your fault when it breaks.

It doesn't have this particular failure mode, at least.

Do you know of a Wireshark filter that will reveal this on Ubuntu? What you're saying doesn't sound credible, but to incentivize, here's the bet:

If you can provide a Wireshark filter that will show a certificate check on a vanilla Ubuntu 20.04 system when the following commands are executed in a bash shell, then I will donate $25 to a charity of your choice. Commands follow:

    cat <<HEREDOC >/tmp/file.c
    #include <stdio.h>

    int main() {
      printf("Hello World");
      return 0;
    }
    HEREDOC
    gcc /tmp/file.c -o /tmp/app
    /tmp/app

I'm sure Linux (the kernel) does not. I don't know of any Linux distro that does, but, I'd be curious if you can point to specifics.

If you could point to any documentation of Windows performing app-start OCSP checks, I'd love to learn more (and recant my earlier statement).

That's a rather extraordinary claim. It's really setting off my BS meter- Can you show us where the code is to do that in the Linux kernel?

No, Linux does not.

Linux does provide application-level and per-application security, as well as sandboxes, but they exist to help the user and the user has complete control over them and their system.

I assure you my Linux machines do not.

The comment you are replying to states other OS' do not have this failure mode so your response is quite the non-sequitur, nevermind of questionable veracity (linux).

This was my intuition!

I was in the middle of a call to fix a problem with a customer, I need to near-panic telling them MY computer was frozen.

Thanks Apple!