Live data from Hacker News

Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

twitter.com

171–180 of 649 posts

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#171

Earlier quoted context omitted.

Not a pi-hole user, but what is the plan for pi-hole once encrypted dns is everywhere? Will it just be dead? I can’t really think of a way for it not to be.

You could have it spoof the keys and add its keys to your OS's key store.

>add its keys to your OS's key store

What key store? User-hostile apps (like Chrome) already use their own key store because they know better than the user :^)

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#172

Earlier quoted context omitted.

What is distinct about the direction of Tim Cook's Apple Inc compared to any previous Apple Inc?

Jobs' Apple created technologies which have rooted deeply in POSIX standards and standard UNIX* conventions. If you knew UNIX(Linux/BSD/whatever), you can find the same data streams on the same places. OS was obscure but, predictable. Different but, familiar. It had kernel extensions, logs and devices. Nothing was extremely obfuscated. It was a UNIX device but, shinier . Now it feels like a glorified iOS box with mor…

I intend this with kindness: normally I don’t nitpick on grammar and punctuation, but you’ve got a repeated error here that’s easily corrected. Generally, you want to break your sentences with commas _before_ usage of “but”: “He wanted to buy a pen, but the store had run out.”

If you’re a native speaker, the comma goes where you’d naturally have a brief pause in speech.

If you’re not a native speaker, it may be helpful to remember that the clause with “but” should be able to be removed & what remains should still be a valid sentence: “He wanted to buy a pen.”, not “He wanted to buy a pen but.”

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#173
post #107

Earlier quoted context omitted.

Not the Enterprise/Education edition.

That you can't legally acquire outside of a commercial support contract.

you can buy it right here for 299

https://www.trustedtechteam.com/products/windows-10-enterpri...

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#174
post #21

Apple seems to do all kinds of weird networking _stuff_. For instance, during wakeup, your T2 equipped Macbook will wait for a DNS response and then use said DNS response to synchronize time via NTP before letting the user use the keyboard. Probably checking timestamps on signatures for the keyboard firmware, or something stupid like that. This only happens if it happens to have a default route. Similarly, all macOS…

do you have a source for the keyboard part? I experience odd delays in typing and this would definitely explain that.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#175
post #28

Earlier quoted context omitted.

Dont pray, just dont buy Apple Products

Boycotting is not an effective strategy for addressing oligopolies. You need actual strong anti-trust regulation.

Engineers and scientists choosing MBPs as a means of getting a POSIX system on nice hardware did more for getting Macs in the workplace than any of the anti-trust actions did.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#176

Earlier quoted context omitted.

What is distinct about the direction of Tim Cook's Apple Inc compared to any previous Apple Inc?

Jobs' Apple created technologies which have rooted deeply in POSIX standards and standard UNIX* conventions. If you knew UNIX(Linux/BSD/whatever), you can find the same data streams on the same places. OS was obscure but, predictable. Different but, familiar. It had kernel extensions, logs and devices. Nothing was extremely obfuscated. It was a UNIX device but, shinier . Now it feels like a glorified iOS box with mor…

It's perhaps worth noting that iOS and all of its restrictions were created under Steve Jobs. And Jobs absolutely expected iOS devices to eventually replace full computers for most people; as he put it, everyone needs a car but only a few need a truck.

Where I absolutely agree with you is that under Jobs, there were no attempts to make macOS behave more like a car. Lion did borrow a handful of visual elements from iOS, but it was mostly aesthetic. Jobs was also on medical leave for much of Lion's development cycle, so I wonder if he was less involved.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#177
post #75

Earlier quoted context omitted.

Boycotting is not an effective strategy for addressing oligopolies. You need actual strong anti-trust regulation.

Hear hear. All "just use an alternative" does is temporarily shift the problem. And then tomorrow an article appears highlighting Windows 10's invasive telemetry and people say "yeah just use macOS".

See also: https://news.ycombinator.com/item?id=24831699

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#178
post #127

Earlier quoted context omitted.

that is not how kexts work(ed), they can do completely arbitrary things to the kernel, including removing any theoretical code signing requirement.

any access? On Windows, you can write a driver that would run in kernel mode, but critical sections can't be modified[1]. I'd imagine there's something similar for mac. [1] https://en.wikipedia.org/wiki/Kernel_Patch_Protection

There hasn’t been anything like that on macOS. macOS on Apple Silicon will have a form of kernel patch protection, like on iOS, but it’s designed to guard against exploits from userland, not approved kexts. It’s definitely possible for third party kexts to bypass that somehow, but possibly only by disabling Secure Boot; I haven’t looked into it.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#179
post #28

Earlier quoted context omitted.

Dont pray, just dont buy Apple Products

What's the alternative for the typical user? Windows has its own problems, and let's face it: market forces on this sort of thing or any other practices by the two of them have not driven people to use desktop Linux instead. For most people, there's simply no reasonable option to switch to that would avoid these things or employ market forces to get these companies to change their ways.

Depends on what the typical user does. I would guess a lot of people would be fine with a Chrome Book.
Post reply on HN