Unreal.
Does it feel to anybody else that a lot of grip tightening seems to be happening right now?
Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
101–110 of 649 posts
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#102That’s annoying yet pretty predictable, at least we’ve still got https://pi-hole.net/ as an option until DNS encryption becomes widespread :/
I don't see how pi-hole get affected by DNS via https, unless you are leaving out the part about computers, tablets, and phones using hard-coded DNS servers that use DNS via https. This is a trend, but a very small one right now.
You are confusing DNSSEC and DoT/DoH, DNSSEC is not encrypted.
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#103"I should have got a Thinkpad"
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#104Earlier quoted context omitted.
Dont pray, just dont buy Apple Products
What's the alternative for the typical user? Windows has its own problems, and let's face it: market forces on this sort of thing or any other practices by the two of them have not driven people to use desktop Linux instead. For most people, there's simply no reasonable option to switch to that would avoid these things or employ market forces to get these companies to change their ways.
I'm not a "typical" user so i dont care.
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#105Apple SW and HW need to be broken up. They have abused their position too much.
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#106Earlier quoted context omitted.
> wait for a DNS response and then use said DNS response to synchronize time via NTP before letting the user use the keyboard ... and what if your network is down? You can't even use your keyboard?
I should've clarified - it only does this if there is a default route. Funnily enough, whilst the firewalls in the original twitter post would possibly fail to catch this traffic, PF will block it just fine.
This mindset probably explains why I have such issues with Apple products when my connection to the internet goes down, but the internal network infrastructure (including DNS server) are perfectly fine.
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#107Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#108That’s annoying yet pretty predictable, at least we’ve still got https://pi-hole.net/ as an option until DNS encryption becomes widespread :/
I don't see how pi-hole get affected by DNS via https, unless you are leaving out the part about computers, tablets, and phones using hard-coded DNS servers that use DNS via https. This is a trend, but a very small one right now.
DNSSEC does not do encryption: DNSSEC is about data origin authentication. Encrypted DNS is DoT or DoH, DNS-over-TLS or DNS-over-HTTPS (and maybe in the future DoQ, DNS-over-QUIC)
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#109Both major consumer OS vendors seem hell-bent on bringing the OS layer under their complete control. As a power user, it's very frustrating. Meanwhile "desktop" Linux still kind of sucks, just like it did 10 years ago. I don't have much hope of seeing a compelling, unified UX out of Linux in my lifetime.
Maybe desktop Linux needs more people like you and me to help make it better?
I appreciate the sentiment, but I'm not a UX designer or expert. And the problem is not that Linux doesn't have enough UI developers, it's that many of them are working on re-inventing the wheel in different, competing ways. Linux needs a dictatorial BDFL for UI - a Linus Torvalds for the desktop - an idea somewhat antithetical to the distributed nature of open source development.
It doesn't help that organizations that could be leading the charge keep changing direction. Ubuntu went Gnome -> Unity -> Gnome in the span of 15 years or so. And now they're going in hard on Snaps, which introduces breaks in UI uniformity again (Gnome Themes, for example[1]).
[1] https://www.omgubuntu.co.uk/2020/10/automatic-theme-installa...
Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur
#110A bit contradictory with Apple's supposedly privacy-focused approach, no?
Was Apple every privacy focused? I think they mostly try to play the good guys to get on users' sides but actually are pretty much the opposite. They know everything about you. Why was the FBI even able to get access to that person's phone? Sounds like there was a loophole. Not happening if it were an encrypted Android device with a high-entropy password. Apple also has vastly different policies in different countrie…
>Not happening if it were an encrypted Android device with a high-entropy password.
because you have to balance security with usability. iPhones use its security chip to slow/prevent password guessing. that allows you to use a weak password without losing much security, but if that system is compromised you're back to square one. I'm sure if you used a high entropy password on ios, they wouldn't be able to get access either.