99: Pop-Up Headlights
Accidental Tech Podcast
Marco Arment
4.3 • 2.5K Ratings
🗓️ 9 January 2015
⏱️ 120 minutes
🧾️ Download transcript
Summary
- Follow-Up:
- SSL
- In schools & corporations
- Gogo actually issues their own certificates to intercept SSL
- SOCKS
- Using C# outside Windows (via Frank A. Krueger)
- Marco's Go feed poller update
- SSL
- Apple's Software Quality
- How to write for understanding
- Rumored 12" MacBook Air
- PlugBug
- Chockenberry on a potential ARM transition
- Fat binary
- Special thanks to _DavidSmith for finding "bezels" in Hypercritical #22
Sponsored by:
Transcript
Click on a timestamp to play from that location
| 0:00.0 | So I should start the show by pointing out that it is 14 degrees outside here in the place that does not have winter. |
| 0:08.0 | Are you still stuck on this, Casey? |
| 0:10.0 | Right here, my thermometer is reading 13.8, so we are clearly colder than you, we have winter you don't. |
| 0:17.0 | I'm 12 here. |
| 0:18.0 | Yeah, those two points are two degrees, man. They're killer. |
| 0:23.0 | Alright, now that I got that out of the way, do you want to do some follow-up? |
| 0:28.0 | That's what we do. |
| 0:29.0 | Let's talk about SSL. |
| 0:31.0 | So we have a couple of more pieces of interesting news slash feedback with regard to whether or not you really need SSL for just plain old websites that don't really do anything interactive. |
| 0:44.0 | David Wacken wrote in and said regarding SSL everywhere, mostly just FYI. |
| 0:48.0 | I'm the assistant man for a decently sized charter school in California, and I can tell you from experience that HTTPS wreaks havoc with the content filters that we are required to have in place. |
| 0:58.0 | I love the idea of cheap or free SSL certs and more security in general, but it's also going to make my life miserable trying to keep students from viewing content that they shouldn't. |
| 1:08.0 | And that's kind of unfortunate that schools have to filter everything, but I totally understand it. |
| 1:14.0 | And that's actually an interesting point that I hadn't considered before. |
| 1:18.0 | Now, they're just going to do the same thing that discussed last week to force everyone to have a certificate to a man in middle attack on everybody on the school's internet. |
| 1:25.0 | And you know, it happens in corporate settings. It happens in schools all the time. And as we learned from many other people who sent the feedback and didn't attach a name to it in the notes because so many people sent it. |
| 1:34.0 | There were showing examples of go-go's in flight internet issuing its own certificates so that it can man in the middle of you. |
| 1:40.0 | Because once your browser trusses, it's difficult. It acts as an SSL proxy, decrypts everything, sees all the traffic that goes through and who knows what else it does. |
| 1:48.0 | So this is definitely a thing. It happens in all sorts of places it happens on plane Wi-Fi happens in academic settings happens in corporate settings. |
| 1:58.0 | Yeah, so that's the wonders of SSL. It's not the fault of SSL, but it's like people want to see your data. |
| 2:06.0 | And if you try to use a SSL to stop them from seeing your data, if you wander into an environment with this saying, no, really, we need to see your data. They'll see your data. |
| 2:14.0 | Well, and I think this is one of those cases where like, you know, you can't have it both ways. If you want to have complete control over what gets viewed over your network and you want to spy on people or filter it, you need control over those devices so that you can do things like install your own certificates via IT policy and group installation methods and stuff like that. |
... |
Please login to see the full transcript.
Disclaimer: The podcast and artwork embedded on this page are from Marco Arment, and are the property of its owner and not affiliated with or endorsed by Tapesearch.
Generated transcripts are the property of Marco Arment and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.
Copyright © Tapesearch 2026.
