Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple removes first-party firewall exemption in macOS 11.2 beta 2

twitter.com

Post reply on HN
Print view View original

111–120 of 354 posts

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#111

Post by Wowfunhappy »

saagarjha wrote: post #103
Wowfunhappy wrote: post #80

Earlier quoted context omitted.

No, and there never will be. It's not the execution of 32bit code that's the problem (you can trivially re-enable that with a kernel flag, if you want), but rather the removal of every 32bit library from the OS. Without those libraries, apps won't run. You can sometimes get away with copying a handful of individual frameworks from older versions of macOS to newer ones, (I recently got Mountain Lion's QuickTime to wor…

You may find https://twitter.com/pvtmert/status/1339329302857457666 interesting

Yes, that is interesting! I wonder if there was anything extra they did, or what apps they actually ran.

I did try this, when Catalina first came out. But maybe I gave up too quickly (It was a "there is no way this will actually work" type of thing), or maybe I tried the wrong app...

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#112

Post by shawnz »

eyelidlessness wrote: post #110
shawnz wrote: post #86

Earlier quoted context omitted.

I don't think you are necessarily disagreeing with what they are saying. First of all, there are surely many people who influenced the creation and release of this feature and I don't think it would be accurate to assign a single motivation to all their work. Second, I don't think it's wrong to say that "boneheaded management cutting corners" by prioritizing the needs of other internal teams over the needs of the use…

> I don't think it's wrong to say that "boneheaded management cutting corners" by prioritizing the needs of other internal teams over the needs of the user is in some sense them "wanting to own your Mac". Although that is a dramatic way to describe it. It’s beyond dramatic. It’s absurd. I’ve worked on so many projects and deadlines that have had to make such decisions, even decisions that eventually fell to me. In nu…

Of course nobody is immune. I believe it takes active work from the users of any vendor's software to disincentivize similar user hostile "improvements". That is just the way that business works in a human society.

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#114

Post by iforgotpassword »

exabrial wrote: post #29

This is really responsible of them! Before, I was trying to figure out how mac's would ever be used anywhere near something classified or secret for a company.

> Before, I was trying to figure out how mac's would ever be used anywhere near something classified or secret for a company.

Relying on a personal firewall on the device itself seems ill-fated. Maybe it could be considered an additional layer of security, but I've yet to work at a place where a personal firewall is part of the security concept, no matter which OS. It's either firewalls at the gateway, maybe additional ones for certain departments, or mandatory proxy servers if you're stuck in the 90s.

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#115

Post by na85 »

PointyFluff wrote: post #113

Imagine being told what software you can and cannot run on your machine.

The linked tweet/TFA is actually about Apple's boneheaded decision to let its own apps bypass firewalls etc., and not about software permissions.

FWIW you can just turn off the Gatekeeper feature which is what I assume you're complaining about.

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#116

Post by eyelidlessness »

m463 wrote: post #90
eyelidlessness wrote: post #38

Earlier quoted context omitted.

Apple gives two fucks about media pressure. Their longstanding history of giving in to pressure almost exclusively is responsive to their users, either: - pro/dev users who act as their trend setters (see recent backpedals on keyboards and Mac Pro form factor) - people hacking stuff where it’s popular enough they want more influence on the UX (bootcamp)

Just search for example "apple backpedals" and it's pretty clear that Apple is not immune to the effects of publicity (like all companies)

I cited a pretty huge example (bootcamp) where there was no media pressure at all. There was definitely tech pressure, but the media had no dog in the fight.

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#117

Post by FireBeyond »

xyst wrote: post #10

very nice - this was one of my main contentions on Big Sur. Will upgrade once 11.2 is stable :)

My other major contention is that Display Stream Compression has been broken since .0 betas through .1.

I have 2 27" 4K HDR 144Hz monitors.

On Catalina I can drive them at full spec on my 2019 Mac Pro, with a W5700X.

On Big Sur, my options are HDR @ 60Hz, or SDR @ 95Hz.

Not to mention the monitors also got a firmware update to unlock 165Hz, which neither Catalina or Big Sur recognize.

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#118

Post by robertlagrant »

jraph wrote: post #109
colejohnson66 wrote: post #77

Earlier quoted context omitted.

I wasn't aware that VS Code was "proprietary malware"? All the code for that is right on GitHub.[0] If you don't trust the prebuilt ones, you're free to build it from the source yourself. Want something else? Their GitHub repo list has almost 4000 repositories totaling 130 pages ![1] Just because the OS itself isn't open source[a] doesn't mean that Microsoft doesn't open source a whole crap ton of stuff. And sure, Wi…

> I wasn't aware that VS Code was "proprietary malware"? I'm sorry to see you are discovering this. VS Code is under this proprietary license [1]. As for the malware part: > Data Collection. The software may collect information about you and your use of the software, and send that to Microsoft. Microsoft may use this information to provide services and improve our products and services. You may opt-out of many of the…

> Indeed you can rebuild your copy or get Codium without the telemetry under the MIT license, and the software is really good, but it is a crippled version and does not make VS Code free software.

What can't it do that regular VSCode can?

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#119

Post by Spearchucker »

iforgotpassword wrote: post #114
exabrial wrote: post #29

This is really responsible of them! Before, I was trying to figure out how mac's would ever be used anywhere near something classified or secret for a company.

> Before, I was trying to figure out how mac's would ever be used anywhere near something classified or secret for a company. Relying on a personal firewall on the device itself seems ill-fated. Maybe it could be considered an additional layer of security, but I've yet to work at a place where a personal firewall is part of the security concept, no matter which OS. It's either firewalls at the gateway, maybe addition…

Defense in depth suggests using controls to protect each individual resource. This includes individual apps, individual servers and individual user devices. A firewall is a single control, but never the only control. This from experience working with... government things.

Re: Apple removes first-party firewall exemption in macOS 11.2 beta 2

#120

Post by Uehreka »

m463 wrote: post #90
eyelidlessness wrote: post #38

Earlier quoted context omitted.

Apple gives two fucks about media pressure. Their longstanding history of giving in to pressure almost exclusively is responsive to their users, either: - pro/dev users who act as their trend setters (see recent backpedals on keyboards and Mac Pro form factor) - people hacking stuff where it’s popular enough they want more influence on the UX (bootcamp)

Just search for example "apple backpedals" and it's pretty clear that Apple is not immune to the effects of publicity (like all companies)

The iPhone Headphone Jack has entered the chat.
Post reply on HN