Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bypassing Firewalls in macOS Big Sur

twitter.com

Post reply on HN
Print view View original

191–200 of 251 posts

Re: Bypassing Firewalls in macOS Big Sur

#191

Post by nuker »

another_kel wrote: post #129
chefandy wrote: post #92

Ugh. I'd love to switch to Linux, but as a designer, I'm stuck. It's not a lack of understanding of how it works— Before I was a designer I was a developer, worked in IT for a while, worked in upper-level support for a while, and Linux was my primary personal and professional OS from the late 90s to like 2010. Why don't I just run a closed-source OS in a VM? They are fussy. Having some weird graphics tablet driver pr…

At least you’re stuck on a Mac. I do motion design and I’m stuck on windows because of stupid Apple vs nvidia beef and apple only allowing you to have a good gpu if you pay for Mac Pro with Xeon you don’t need and expensive memory you don’t need.

Try Thunderbolt 3 eGPU enclosure with AMD card inside. There is much info on https://egpu.io

Re: Bypassing Firewalls in macOS Big Sur

#192

Post by curt15 »

angry_octet wrote: post #171
andy_ppp wrote: post #158

Earlier quoted context omitted.

What stops a Linux program altering the system? I guess you need root access to change things outside of /usr/local this could easily be done on macOS too but the wheel had to be reinvented by Apple in a way that is probably less trustworthy.

With SIP you can't change some things even as root. SIP has definitely made macos a harder target, though it is still lagging Windows in some areas. Linux is almost comically unprotected. @grishka Edit because I'm rate limited: I've not seen anything that does executable validation for linux and actually works. Needs lots of kernel support. See the response from the old DigSig author: https://stackoverflow.com/questi…

>I've not seen anything that does executable validation for linux and actually works.

ChromeOS uses dm-verity to verify the root partition at runtime, similar to Mac OS's signed system volume.

Re: Bypassing Firewalls in macOS Big Sur

#194

Post by latexr »

submeta wrote: post #116
qz2 wrote: post #13

This whole release cycle is just one gigantic facepalm after another. I am feeling pretty heavily smug that I got rid of my Apple kit earlier this year because I wasn't happy with the direction of the platform.

I have gotten rid of almost any Apple only tools (OmniGraffle to Figma; OmniFocus, Things3, iA Writer, Ulysses, Alfred App to Emacs+Org, and some more), but there is only only a few left that I can‘t find a replacement for in Linux-land: DEVONthink for managing my thousands of documents (actually I just keep my files in DEVONthink and use the search feature, could end up using just file system), ScanSnap Manager (a d…

> Apple only tools (…) iA Writer

iA Writer is available on Windows and Android.

Re: Bypassing Firewalls in macOS Big Sur

#195

Post by spurgu »

submeta wrote: post #116
qz2 wrote: post #13

This whole release cycle is just one gigantic facepalm after another. I am feeling pretty heavily smug that I got rid of my Apple kit earlier this year because I wasn't happy with the direction of the platform.

I have gotten rid of almost any Apple only tools (OmniGraffle to Figma; OmniFocus, Things3, iA Writer, Ulysses, Alfred App to Emacs+Org, and some more), but there is only only a few left that I can‘t find a replacement for in Linux-land: DEVONthink for managing my thousands of documents (actually I just keep my files in DEVONthink and use the search feature, could end up using just file system), ScanSnap Manager (a d…

If you don't mind, could you elaborate a bit on how you've replaced Alfred?

I use it heavily for:

* snippets (mostly for terminal so Termius might be an option but I also use it for non-terminal things)

* clipboard history (are there up to par alternatives?)

* workflows - mostly launching various websites, like Jira tickets with " " or "c suponer" to conjugate Spanish verbs), but also for launching various shell scripts (like changing nameservers with "ns "), or keyboard shortcuts for playing specific sounds (for fun)

> I guess I need to get a Thinkpad running Linux for slowly finding replacments for my tools, and migrate not within weeks, but spreading my migration process over months.

I'm in the same boat. I've been eyeballing a Tuxedo Pulse 14, but have been thinking of getting a regular PC keyboard in the meantime for the Mac and play around with Linux in Virtualbox.

Edit: Found this, seems like there's hope: https://medium.com/curiouscaloo/macos-to-ubuntu-part1-alfred...

Re: Bypassing Firewalls in macOS Big Sur

#196

Post by Uupis »

chongli wrote: post #96
smnrchrds wrote: post #53

Earlier quoted context omitted.

I expect Apple to take the opposite path, not immediately, but eventually: disable sideloading and enforce a Mac App Store only policy on macOS, similar to iOS. After all, if all apps are reviewed and approved by Apple, there is no malware that can use this weakness or the future ones. And I am sure the 30% cut and $100 annual fee has nothing to do with the decision either. Apple only cares about customers, not money…

disable sideloading and enforce a Mac App Store only policy on macOS People have been repeating that for years, since the Mac App Store was announced. It’s not in Apple’s interest to do it. There is a ton of software, open source in particular, that Apple benefits tremendously by. It costs Apple nothing to maintain the status quo. Going Mac App Store only would drive tons of developers off the platform and do absolut…

> It’s not in Apple’s interest to do it.

I think an argument can be construed that (one of) Apple's interests is to control what and how users can do on Apple devices. iOS-like lockdown seems entirely in line with that.

> Going Mac App Store only would drive tons of developers off the platform and do absolutely nothing to increase sales on the Store anyway.

And others would fill in the gap. The Store sales would inevitably have to go up – it would become the only way to get software on the device. Not like every user would immediately drop the Mac. I can imagine a non-trivial fraction of users wouldn't even notice that something has changed.

It wouldn't happen right next year, or in one go, but the more I think, the more I am growing convinced that it's sneaking up.

> It would be widely panned as a ham-fisted move.

If it doesn't affect the bottom line, it doesn't really matter. They got away with 4 years of perhaps the worst laptop keyboard of the decade; are getting away with inflicting the TouchBar price tag on tens of thousands of users(1), making devices unserviceable, and even with the matter in question.

Given Apple's size and user base, I'm afraid that outside of straight-up illegal activity, there's little Apple can't get away with. Especially if the janky move is factored into small, cruddy steps.

(1) I realize it's a lame point, but it annoys me personally

Re: Bypassing Firewalls in macOS Big Sur

#197

Post by pjmlp »

nbzso wrote: post #187
pjmlp wrote: post #132

Earlier quoted context omitted.

Apple developers would stay on the platform, regardless. The GNU/Linux developers that have been giving money to Apple for a shinny UNIX, might go to Windows with WSL, which I doubt unless we are speaking about the crowd that only cares about POSIX and keeps calling that "Linux". The GNU/Linux developers that have been giving money to Apple for a shiny UNIX instead of sponsoring OEMs, now they finally learn how Apple…

In this context it can be a "power" move to push away developers who are unwilling to agree to further closing of the platform. As a result Apple will have only "the faithful ones" and will avoid reactions like recent Unreal fiasco ( in this case the faithful one is Unity). And as I see its working perfectly, most of tech you-tubers are in the bag by default, most of the designers and creative users are lazy (and tec…

Game developers are more than happy to deal with such platforms, and I confess it was more fun to target the Amiga, knowing what to count on, than the mess that the PC has been since forever.

That crowd can turn on to their Pandora, GPX, Arduino, Raspberry, whatever SOC is going trendy.

As for Unreal I wish they learn their lesson, or be honest and create a lawsuit against Sony, Nintendo and Microsoft.

Re: Bypassing Firewalls in macOS Big Sur

#198

Post by grishka »

curt15 wrote: post #192
angry_octet wrote: post #171

Earlier quoted context omitted.

With SIP you can't change some things even as root. SIP has definitely made macos a harder target, though it is still lagging Windows in some areas. Linux is almost comically unprotected. @grishka Edit because I'm rate limited: I've not seen anything that does executable validation for linux and actually works. Needs lots of kernel support. See the response from the old DigSig author: https://stackoverflow.com/questi…

>I've not seen anything that does executable validation for linux and actually works. ChromeOS uses dm-verity to verify the root partition at runtime, similar to Mac OS's signed system volume.

So does Android. But the executable binaries themselves aren't signed, this only verifies the integrity of the system partition at boot time.

Re: Bypassing Firewalls in macOS Big Sur

#199

Post by benhurmarcel »

another_kel wrote: post #129
chefandy wrote: post #92

Ugh. I'd love to switch to Linux, but as a designer, I'm stuck. It's not a lack of understanding of how it works— Before I was a designer I was a developer, worked in IT for a while, worked in upper-level support for a while, and Linux was my primary personal and professional OS from the late 90s to like 2010. Why don't I just run a closed-source OS in a VM? They are fussy. Having some weird graphics tablet driver pr…

At least you’re stuck on a Mac. I do motion design and I’m stuck on windows because of stupid Apple vs nvidia beef and apple only allowing you to have a good gpu if you pay for Mac Pro with Xeon you don’t need and expensive memory you don’t need.

Right. I do mechanical engineering and the whole field is stuck on Windows.

Re: Bypassing Firewalls in macOS Big Sur

#200

Post by raverbashing »

As opposed to the OCSP thing, bypassing firewalls and VPNs seem to be really out there, especially the VPN part

You have a VPN active - I'm actually saying go here not there. Because the default connection might be unsafe, limited, etc.

Now, since I have to spend money on multiple dongles, etc that might justify me to buy a pi-hole for a home connection. Get around that Apple

Post reply on HN