Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: How to Block Apple's Spyware on BigSur?

news.ycombinator.com

Post reply on HN
Print view View original

31–40 of 45 posts

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#31

Post by aprdm »

kushan2020 wrote: post #4
znpy wrote: post #2

I honestly can't understand why on earth would a sane minded person spend all that money on apple hardware and then on top of that spend a a lot of time fighting a losing fight against the software. Just switch to something else.

There are things which Apple Macs excel at, and no other laptop even comes close. This is not me speaking in thin air, you can yourself notice that majority of developers and creative professionals own Macs.

> you can yourself notice that majority of developers and creative professionals own Macs.

In the USA/UK/Canada startup land maybe? I very much doubt that most developers use a Mac. For one it is extremely expensive in "non first world" countries.

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#32

Post by Harvey-Specter »

kushan2020 wrote: post #4
znpy wrote: post #2

I honestly can't understand why on earth would a sane minded person spend all that money on apple hardware and then on top of that spend a a lot of time fighting a losing fight against the software. Just switch to something else.

There are things which Apple Macs excel at, and no other laptop even comes close. This is not me speaking in thin air, you can yourself notice that majority of developers and creative professionals own Macs.

Stack Overflow's annual developer survey the most used operating system was Windows with 45.8% of respondents, and MacOS and Linux split the rest pretty evenly.

https://insights.stackoverflow.com/survey/2020#technology-de...

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#33

Post by _qulr »

hello_asdf wrote: post #7

There's a few solutions: LittleSnitch 4 can continue to work (with the kext) on Big Sur following this: [1] LittleSnitch 5 can block all protected MacOS processes by following this: [2] Murus can use PF and block IPs for Apple services: [3]. This isn't per process, and is really just a UI for the built-in PF process. If you'd like to block the notarization check, you can block trustd (/usr/libexec/trustd) access to o…

> If you'd like to block the notarization check, you can block trustd (/usr/libexec/trustd) access to ocsp.apple.com

Technically speaking, OCSP and notarization are two different things. The notarization check is actually to https://api.apple-cloudkit.com by /usr/libexec/syspolicyd

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#34

Post by refried_ »

grayhatter wrote: post #21
kushan2020 wrote: post #4

Earlier quoted context omitted.

There are things which Apple Macs excel at, and no other laptop even comes close. This is not me speaking in thin air, you can yourself notice that majority of developers and creative professionals own Macs.

Because people who create stuff use Macs, Macs are the only thing in existence that's functional?! You sure about that logic? Related, any one know of any brilliant engineers who deeply understand what they're using that use/love apple products?

Zing

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#35

Post by belval »

aprdm wrote: post #31
kushan2020 wrote: post #4

Earlier quoted context omitted.

There are things which Apple Macs excel at, and no other laptop even comes close. This is not me speaking in thin air, you can yourself notice that majority of developers and creative professionals own Macs.

> you can yourself notice that majority of developers and creative professionals own Macs. In the USA/UK/Canada startup land maybe? I very much doubt that most developers use a Mac. For one it is extremely expensive in "non first world" countries.

On top of that, a lot of companies simply give you a Mac, you don't get a choice.

I HATE my piece of crap MBP and would take a small pay cut to go back to Ubuntu/Arch.

This kind of weird elitism is getting very old.

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#36

Post by ianmf »

Are they using to Spy on their users or to keep the 'image' that Apple devices are more secure than the rest? I think the binary execution protection can do more good than harm. Sometimes shit happens like it did on Big Sur release. I just hope they change feature to not bring down the system to nearly unusable when ocsp.apple.com doesn't respond.

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#37

Post by Craighead »

supermatt wrote: post #19
znpy wrote: post #12

Earlier quoted context omitted.

This is common apple fanatism bs. Except for a few very specific workloads and iDevices development, most things can be done on windows or Linux equally well. In the meantime, have fun with your dumbed down is where you can only run apple-approved things.

I respectfully disagree. The entire desktop experience on macOS feels WAY more cohesive than windows (which I have used since early 90s), or any of the DE i have tried on linux/bsd (which i have used extensively for over 20 years). Additionally the quality of the hardware (specification/cost aside) far exceeds the alternatives. I HATE the way that apple are going. Their products are absolutely fantastic, but it is ev…

Your comment is by definition subjective

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#38

Post by bromuro »

znpy wrote: post #2

I honestly can't understand why on earth would a sane minded person spend all that money on apple hardware and then on top of that spend a a lot of time fighting a losing fight against the software. Just switch to something else.

I am a programmer because I love Macs and I only want to work on these computers.

If I’d have to switch to another platform I prefer to quit programming at all.

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#39

Post by cue_the_strings »

mixedCase wrote: post #26
hnarayanan wrote: post #14

Earlier quoted context omitted.

Literally everything. Like a good trackpad, build quality, stability, ...

> good trackpad Granted. Except it's useless from my perspective because: * keyboard-centric tiling workflow + mouse - is faster than- * a standard K&M stacked windows workflow - is mostly faster than- * keyboard-centric tiling workflow + any trackpad - is faster than - * the standard macOS experience with a trackpad It's an exercise in frustration whenever I have to get help from or help out a peer which uses a touc…

Stability on macOS? Laughable.

Macs are pretty popular among musicians and producers. When El Capitan dropped, pretty much all audio hardware and software stopped working. I remember that you couldn't use Native Instruments plugs and the majority of pro audio interfaces stopped working.

This was fixed after a while, but it took at least half a year for everything to work again for 50% of users and a full year for everything to work for 90% of users.

If you upgraded by accident and didn't have backups, you were in trouble. Even if you had backups, you could still have issues.

Here's a link from back in the day:

https://macprovideo.com/article/audio-software/5-reasons-mus...

Now, did something similar ever happen on Linux or Windows?

I can safely say that a lot of people lost some revenue because of that upgrade (there were also issues for video production software), at least until the word spread that you shouldn't upgrade.

Re: Ask HN: How to Block Apple's Spyware on BigSur?

#40

Post by hello_asdf »

_qulr wrote: post #33
hello_asdf wrote: post #7

There's a few solutions: LittleSnitch 4 can continue to work (with the kext) on Big Sur following this: [1] LittleSnitch 5 can block all protected MacOS processes by following this: [2] Murus can use PF and block IPs for Apple services: [3]. This isn't per process, and is really just a UI for the built-in PF process. If you'd like to block the notarization check, you can block trustd (/usr/libexec/trustd) access to o…

> If you'd like to block the notarization check, you can block trustd (/usr/libexec/trustd) access to ocsp.apple.com Technically speaking, OCSP and notarization are two different things. The notarization check is actually to https://api.apple-cloudkit.com by /usr/libexec/syspolicyd

Thank you, I didn't know that.
Post reply on HN