PSA: macOS updates often modify your System Preferences to violate your Privacy

#1

Post by webmobdev » Thu, Mar 11, 2021, 1:03 AM UTC

I went to change a Firewall setting for an app and discovered to my shock all the listed apps in it had been set to "Allow incoming connections" (which I had never done) and the options

- "Automatically allow built-in softwares to receive incoming connections" and

- "Automatically allow downloaded signed software to receive incoming connections"

had been enabled, even though I had disabled them. In the Privacy > Advertising section. Limit Ad Tracking had been disabled even though I had enabled it. (And if it needs to be said for some - no, I don't have any malware on my computer).

Edit: I am pissed because all I had installed were security updates.

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#2

Post by batmaniam » Thu, Mar 11, 2021, 1:51 AM UTC

It would be great if someone from Apple could chime in on this. Like, the team who implemented this change... what was the reasoning? Were they directives from the boss or something? Why would the team compromise the user's settings like this? Was there no one on the engineering team in a high enough position to push back on this?

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#3

Post by eyelidlessness » Thu, Mar 11, 2021, 1:51 AM UTC

This sounds exceedingly uncharacteristic of Apple and almost certainly a bug, not intentional. I know it’s hard to get their attention filing bugs so upvoting in case anyone can help get this to the right eyes. But I definitely don’t think there was malice or even conscious intent on this one.

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#4

Post by egberts » Thu, Mar 11, 2021, 2:03 AM UTC

I wonder if Lil’ Snitch firewall app for macOS is impacted by this SSH port being opened up by macOS upgrade(s). — Holding back the upgrade until then.

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#5

Post by Alex3917 » Thu, Mar 11, 2021, 2:05 AM UTC

Apple also tries to trick you into enabling Siri every time you install a security update.

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#6

Post by wayneftw » Thu, Mar 11, 2021, 2:14 AM UTC

Alex3917 wrote: post #5

Apple also tries to trick you into enabling Siri every time you install a security update.

Same thing with iOS updates. Every major update will force you to go through all of the options that Apple wants you to use like having a passcode and using Siri and other such things. If you don't choose the options that Apple wants you to choose – they will put a notification on the Settings app that you did not finish setup. Then you have to go through the entire setup again choosing the same exact options that you did the first time. A few times this is tripped up my wife who then complains that her phone is now forcing her to use a passcode to open the phone.

Also some settings are irreversible. For me, I made the mistake of using my personal Apple ID as my developer ID for a while. At some point Apple started forcing developers to enable to 2FA. Now that I've enabled it I am not allowed to disable it. So, one day I will have to start a whole new Apple account and lose anything that I have purchased.

Luckily I avoid getting locked in, I don't buy many apps and none of the apps that I use on a daily basis are purchased. Unfortunately I will lose all of my saved passwords and I will have to transfer my contacts, messages and photos manually. I don't even think I can transfer my messages so I will just have to lose the old ones.

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#7

Post by ntSean » Thu, Mar 11, 2021, 2:20 AM UTC

This has been discussed here: https://news.ycombinator.com/item?id=26303946

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#8

Post by m45t3r » Thu, Mar 11, 2021, 2:26 AM UTC

ntSean wrote: post #7

This has been discussed here: https://news.ycombinator.com/item?id=26303946

This is very different from a sudoers file though. Apple has full control of how those things are configured, so they could easily migrate the values if they want, for example.

The fact that they doesn't shows either a malice from them, or at least very sloppy engineering/product management.

Because this kinda of attitude is really bad, and if it was a product from any other company (like Google) I am sure that people would say that this is proposital.

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#9

Post by jaimex2 » Thu, Mar 11, 2021, 2:28 AM UTC

Apple do like to hoot on about how they're privacy first and that's why their products cost more.

They just guard the data from third parties to not have competition milking their own ecosystem. It's a great way to have their cake and eat it too.

Re: PSA: macOS updates often modify your System Preferences to violate your Privacy

#10

Post by jaimex2 » Thu, Mar 11, 2021, 2:29 AM UTC

eyelidlessness wrote: post #3

This sounds exceedingly uncharacteristic of Apple and almost certainly a bug, not intentional. I know it’s hard to get their attention filing bugs so upvoting in case anyone can help get this to the right eyes. But I definitely don’t think there was malice or even conscious intent on this one.

You forgot the /s