Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

twitter.com

Post reply on HN
Print view View original

231–240 of 649 posts

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#231

Post by [deleted] »

vinay427 wrote: post #142
gabereiser wrote: post #119

Earlier quoted context omitted.

Tim Cook's Apple Inc is really a nightmare. Sure we have sleek shiny laptops and devices that are amazingly powerful but at what cost? I still haven't found a trackpad as good as MagicTrackpad sadly otherwise I'd ditch the MacBook Pro. To be fair to Apple though, it's their OS, they can do what they want and we agree every time we update MacOS or iOS. It's crazy to me that we basically only have 3 phone device choice…

What is distinct about the direction of Tim Cook's Apple Inc compared to any previous Apple Inc?

[deleted]

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#232

Post by zepto »

munificent wrote: post #54
nix23 wrote: post #28

Earlier quoted context omitted.

Dont pray, just dont buy Apple Products

Boycotting is not an effective strategy for addressing oligopolies. You need actual strong anti-trust regulation.

Except that it’s not an oligopoly - it can’t be by definition.

There is a free alternative which is better in many ways and has an unlimited supply.

The only reason Apple has a lead in software is that they have made their closed source model deliver end-user benefits at a faster rate than the open source alternatives.

There is no reason this needs to remain true, and there are a lot of signs that it will not continue.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#233

Post by LocalH »

Wowfunhappy wrote: post #20
coldtea wrote: post #13

Earlier quoted context omitted.

They provide the OS. If you don't trust them, then you shouldn't trust anything running on top of it either...

You could (and perhaps would) make the same argument about Intel (for providing the processor) or Broadcom (for providing the wifi chip) or Comcast (for providing internet service). And it's true, all of these parties have the ability to use their positions for nefarious purposes. However, I would like to limit that potential as much as possible, partly by creating a stigma against practices that remove control from…

I find it interesting how the needs of legitimate security mesh so well with the industry desires to kill off general-purpose computing for the majority of users

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#234

Post by lifty »

tankenmate wrote: post #25
lifty wrote: post #16

Earlier quoted context omitted.

I would love if there would be a small appliance based on a raspberry pi zero or something of similar size, that could be controlled/configured from an app on your phone. This device would be powered through a usb cable (no data) from your laptop, and act as a WiFi hotstpot that you can use to route all your traffic via the VPN or network of your choice. Even if your laptop would be infected by malware or a rootkit,…

This is basically what pi-hole is, as to controlling it from a phone app, well it has a web interface.

That's how I use pi-hole as well. But I would like something that has wireguard and tor as well, in a nice maintainable package or little box.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#235

Post by DrAwdeOccarim »

indymike wrote: post #70
metroholografix wrote: post #42

Background: I've written my own kernel extension that works in similar manner to Little Snitch, but does a lot more, including SSL MITM and on-demand packet capture, that I've been using for more than 10 years now. It's a fact that Apple has continuously moved to lock down macOS in ways that are antithetical to folks that want full control over their operating system. To many of us that moved on from Linux on the des…

I just moved from Macos to Linux. The Linux desktop experience has improved a lot in the past five years (at least KDE has).

Same! I purchased a Razer Blade Stealth 13 and put Linux Mint on it end of 2019. I have been really pleased with the entire thing. I don't do anything crazy (web browsing, simple budget spreadsheets, watching videos, viewing family photos) and it works perfectly. I was an avid mac user for many years because of bash/BSD but the march toward locked-down hardware and software really pushed me away. The only thing I miss are the glass trackpads and the fantastic gesture support.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#236

Post by m463 »

eptcyka wrote: post #21

Apple seems to do all kinds of weird networking _stuff_. For instance, during wakeup, your T2 equipped Macbook will wait for a DNS response and then use said DNS response to synchronize time via NTP before letting the user use the keyboard. Probably checking timestamps on signatures for the keyboard firmware, or something stupid like that. This only happens if it happens to have a default route. Similarly, all macOS…

check out their captive portal detection. It's a mess of apple-specific garbage.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#237

Post by lifty »

ignoramous wrote: post #97
lifty wrote: post #16

Earlier quoted context omitted.

I would love if there would be a small appliance based on a raspberry pi zero or something of similar size, that could be controlled/configured from an app on your phone. This device would be powered through a usb cable (no data) from your laptop, and act as a WiFi hotstpot that you can use to route all your traffic via the VPN or network of your choice. Even if your laptop would be infected by malware or a rootkit,…

https://firewalla.com/ might be it, though I am sure there are other similar products. Disclaimer: I work on a similar product but for smartphones.

This looks awesome! Thanks

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#238

Post by anonymousisme »

fanf2 wrote: post #108
anonymousisme wrote: post #72

Earlier quoted context omitted.

I don't see how pi-hole get affected by DNS via https, unless you are leaving out the part about computers, tablets, and phones using hard-coded DNS servers that use DNS via https. This is a trend, but a very small one right now.

DNSSEC does not do encryption: DNSSEC is about data origin authentication. Encrypted DNS is DoT or DoH, DNS-over-TLS or DNS-over-HTTPS (and maybe in the future DoQ, DNS-over-QUIC)

Of course. I knew what I meant, but used the wrong word.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#239

Post by DrAwdeOccarim »

kar1181 wrote: post #125
metroholografix wrote: post #42

Background: I've written my own kernel extension that works in similar manner to Little Snitch, but does a lot more, including SSL MITM and on-demand packet capture, that I've been using for more than 10 years now. It's a fact that Apple has continuously moved to lock down macOS in ways that are antithetical to folks that want full control over their operating system. To many of us that moved on from Linux on the des…

The linux desktop experience is still quite in a state. I will likely do the same and suffer Linux, but I think many will go back to windows as WSL continues to improve. Apple is going to lose developers.

Try Linux Mint with xfce. Really nice out of the box.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#240

Post by kstrauser »

giancarlostoro wrote: post #180

I mean I already knew something was weird when I couldnt su into root and do... root things without a bios hack on a Mac. Thats just not how Unix works at all... The whole concept of root is you are root no exceptions.

That's absolutely not true. For instance, the BSDs have the notion of securelevels (https://man.openbsd.org/securelevel.7) which severely limits what even the root user can do. SELinux can do a lot of the same things.
Post reply on HN