Michael Tsai on Twitter: "@pmod In general, yes. But in this case I downloaded Apple’s installer from Apple’s server over HTTPS. So how is code signing helping me?"

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

Michael Tsai ‏@mjtsai Mar 3

Previously Downloaded OS X Installers No Longer Work: http://mjtsai.com/blog/2016/03/03/previously-downloaded-os-x-installers-no-longer-work/ … #mjtsaiblog
43 retweets 30 likes
Peter M. O’Donnell ‏@pmod Mar 3

@mjtsai @siracusa Calling certificate-signed software "planned obsolescence" is reductive and entirely ignores the security angles.
Michael Tsai ‏@mjtsai Mar 3

@pmod What exactly is the security angle here?
Peter M. O’Donnell ‏@pmod Mar 3

@mjtsai Code signing with expiring certs? Have you not yet considered that some of the recent hiccups are related to compromised certs??
Michael Tsai ‏@mjtsai Mar 3

@pmod In what scenario would it be beneficial securitywise for Apple to disable their own installers that users downloaded from their store?
Peter M. O’Donnell ‏@pmod Mar 3

@mjtsai Because they had to retire a compromised certificate??
Michael Tsai ‏@mjtsai Mar 3

@pmod Sorry, not following you. Which certificate do you think was compromised? And how could that endanger the installer I already have?
Peter M. O’Donnell ‏@pmod Mar 3

@mjtsai Contemporary cert validation is a security feature, yeah?

‏@mjtsai

@pmod In general, yes. But in this case I downloaded Apple’s installer from Apple’s server over HTTPS. So how is code signing helping me?

7:49 PM - 3 Mar 2016

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.