Join Platy’S Readwise Highlights
A batch of the best highlights from what Platy's read, .
When you launch a Developer ID signed app, it may perform an OCSP check. You can see this if you take a packet trace. The check consists of an HTTP GET request (port 80, unencrypted!) to ocsp.apple.com with a path that is both Base64 encoded and URL encoded. According to the OCSP format, the encoded bytes end with the serial number of the Developer ID cert. The OCSP check is performed by the trustd processes (/usr/libexec/trustd). An OCSP check is different and separate from a notarization check, which is performed by the syspolicyd process. Developer ID certs were always checked for revocation via OCSP, before notarization even existed.
Developer ID Certificate Revocation
lapcatsoftware.com
Solidity as used on ethereum for smart contract implementation, is not a language that allows for mathematical proof (ie: is not referentially transparent). It allowed for the implementation of semantic information, or put explicitly, the developers' intent. The recursion-call that led to The DAO hack should have been used in a specific way, as the developers intended it.
Code Is Law? Not Quite Yet
coindesk.com
Money is something that people living in specific contexts and circumstances use to buy and sell particular things, create particular relations of credit and debt, and participate in these relations in particular ways. __These transactions are enabled by but not reducible to money’s impersonality__, for the motivations and rationalities that shape them are determined by the transacting individuals’ personal perceptions and desires.
The Currency of Truth
Emily H. C. Chua
...catch up on these, and many more highlights
Readwise