Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

twitter.com

Post reply on HN
Print view View original

261–270 of 649 posts

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#261

Post by deltron3030 »

capableweb wrote: post #131
AnonHP wrote: post #37

I trust Apple a lot more than I trust Google or Facebook, but this clamping down of the Mac without options for power users while officially stating that the Mac will remain a Mac is alarming and distasteful on the part of Apple. With the transition to Apple’s own chips looming, it seems like the days of “a Mac is a personal computer and not an app console like an iPhone or iPad” will be over by the middle of this de…

People keep saying "I trust company X a lot more than I trust company Y" but is "trust" really something that applies to companies at all? Feels weird to humanize companies in that way. If you trust a company, isn't it really that you trust the humans working at that company? So you should really say "I trust person X who happens to work at X today", as as soon as they leave, the trust went with them. Companies are n…

>but is "trust" really something that applies to companies at all?

Of course, It's called branding. Promises that aren't kept are still promises that aren't kept, and Apple was traditionally known for going beyond expectations, it's the core of their brand.

Some companies are more B2B business and developer friendly, like MS and FB, and others like Apple and Amazon are the opposite, they're first and foremost about B2C and mainstream customers.

Apple is less B2B focused than before because of the iPhone. They don't have to attract devs by giving them the best tools, they can attract them because of their market share among solvent customers on mobile alone.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#263

Post by Xavdidtheshadow »

joncp wrote: post #32

That totally breaks my use case for Little Snitch: working tethered. When I tether my laptop it thinks it has free reign with the bandwidth and all of the little background processes can kill my data in a few minutes. With a firewall, I can grant access to only the processes that I need to get my work done. Now, I guess I have to run some external firewall between my laptop and my phone. ... or better yet, abandon Ap…

I use Trip Mode for that (https://tripmode.ch/). Though, it's not unlikely it'll have the same issues described in the OP, it does seem to block Apple stuff on Mojave.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#264

Post by iosonofuturista »

dylan604 wrote: post #228
miguelmota wrote: post #166

Earlier quoted context omitted.

Curious, what sort of things make desktop Linux suck in your opinion? I’ve been on Linux for years as my primary machine and haven’t encountered anything that made me switch back.

Can you select a file in the whatever is the Linux desktop equivalent of Finder and hit the spacebar to get a quick look at the file native to the OS? Can I run the software I need to be able to make a living? Can I run multiple HiDPI displays that I can connect/disconnect as needed without causing issues? I honestly don't know if these are or are not available features. The first question is a muscle memory thing fo…

Add recurrent sound issues to the list. Also sub-par touchpad support.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#265

Post by gsnedders »

Macha wrote: post #162
OJFord wrote: post #80

Earlier quoted context omitted.

Wouldn't pi-hole be the 'resolver' the other end of the request, the party it's encrypted for? Sure, Apple (or whoever) could just bypass it and use something specific, but can already just use an IP, no DNS anyway?

My understanding is the concern would be that closed source applications would use a hardcoded DoH resolver and pinned certs to bypass any unwanted blocks of ads/telemetry which could only be resolved with decompilation and patching with varying degrees of difficulty.

Is this much more of a concern than closed source applications that use open DNS but use pinned certs to connect to the resolved host?

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#266

Post by kstrauser »

m463 wrote: post #259
kstrauser wrote: post #240

Earlier quoted context omitted.

That's absolutely not true. For instance, the BSDs have the notion of securelevels ( https://man.openbsd.org/securelevel.7 ) which severely limits what even the root user can do. SELinux can do a lot of the same things.

I don't know about bsd, but there's lots of documentation on how selinux works (including source code) and information on how to alter its behavior in a fine-grained fashion. and selinux doesn't leave itself a backdoor (as far as the nsa has told us)

That's a different issue, though. Today, booting into macOS is similar to booting into a BSD with securelevel=1 enabled, or into Linux with SELinux set up not to allow modifying files in /bin or such.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#267

Post by Spivak »

eptcyka wrote: post #63
xenospn wrote: post #48

Earlier quoted context omitted.

Having a default route does not mean the internet is reachable.

I wish Apple agreed. But on the other hand, there are use cases where checking for the existence of a default route is the best heuristic.

I mean that's what a default route is supposed to mean, right? That this machine can route to any address. It might not get there because of a firewall, or because nothing is at a given address but you're at least claiming to know what to do with a packet destined for anywhere.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#268

Post by bigwavedave »

joshiee wrote: post #229
Wowfunhappy wrote: post #181

Earlier quoted context omitted.

I read this as a poetic choice by GP—it evoked Apple's "Think different" tagline in my mind, although now I'm not actually sure why. I could be wrong though!

to me it's plainly wrong for a comma. but I also don't like to color outside the box. perhaps an ellipses would've been ok.

Don't worry, your instincts are correct. The only time a comma should follow a conjunction is if there is an interrupting phrase that breaks up the sentence. Example: "He's a nice guy but, to be honest, he smells like a hippopotamus."

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#269

Post by darthrupert »

horsawlarway wrote: post #222
x87678r wrote: post #201

Earlier quoted context omitted.

New XPS 15 has great trackpad and is a good alternative. Its not any cheaper than MBP though. https://www.youtube.com/watch?v=WCM8FZlFTas

Second this - XPS machines on Wayland are basically spot on for trackpads. Honestly - just Wayland in general has dramatically improved my linux desktop experience. 10/10, will never go back to X.

Did Wayland start being good recently? Its glacial progress is one of the reasons I switched to macs a few years ago.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#270

Post by dylan604 »

miguelmota wrote: post #257
dylan604 wrote: post #228

Earlier quoted context omitted.

Can you select a file in the whatever is the Linux desktop equivalent of Finder and hit the spacebar to get a quick look at the file native to the OS? Can I run the software I need to be able to make a living? Can I run multiple HiDPI displays that I can connect/disconnect as needed without causing issues? I honestly don't know if these are or are not available features. The first question is a muscle memory thing fo…

> Can you select a file in the whatever is the Linux desktop equivalent of Finder and hit the spacebar to get a quick look at the file native to the OS? Yes, I use pcmanfm on Linux and the spacebar will open the file in the default program. > Can I run the software I need to be able to make a living? Depends on what you do. If it's mostly design work and you require Adobe products then Linux is not a good choice. For…

>Yes, I use pcmanfm on Linux and the spacebar will open the file in the default program.

That's not what QuickLook does. It allows the user to get a "quick look" at a file without launching a default application. Also, in macOS you get access to QuickLook from inside any application's Open dialog. That's a huge time saver when you have similar files and just need to see which one before doing a full open. Think large image files that you want to place in a layout.

Post reply on HN