Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

twitter.com

Post reply on HN
Print view View original

331–340 of 649 posts

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#331

Post by novok »

m463 wrote: post #244
rantwasp wrote: post #186

Earlier quoted context omitted.

hahaha. I also don’t plan to upgrade past Mojave. To me Catalina was a trainwreck and at this point I think I’m loosing a lot of trust I used to put in Apple. this is compounded by the fact that I love Little Snitch and it has basically exponentially improved my life when it comes not only to browsing the web but when using any app on mac.

I tried catalina and... why? why did they dumb down mail? This is like the beige apple box era all over again. lame decision after lame decision and everything turns to mud.

There was a bunch of stuff broken by local file security stuff I'm guessing.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#332

Post by _qulr »

coldtea wrote: post #317
_qulr wrote: post #74

Earlier quoted context omitted.

> Do people really install Little Snitch (which I've used since 2005 or so) for blocking Apple's own apps? Yes, Absolutely! My primary use case for Little Snitch is to block Apple "services" that I don't use or want. I don't use iCloud at all. I don't want Apple phoning home unless I specifically, manually check for software updates.

> I don't use iCloud at all. I don't want Apple phoning home unless I specifically, manually check for software updates. I don't think a valid buyer of macOS computers is the type that doesn't use iCloud and needs to block it. Sounds like masochism. They can of course not use iCloud or the App Store. Blocking it? Might as well use another OS. I don't doubt there are some users like that. I doubt there are many users…

> I don't think a valid buyer of macOS computers is the type that doesn't use iCloud and needs to block it.

"a valid buyer"?

> Might as well use another OS.

Ah yes, the many different wonderful options for desktop OS...

> I don't believe an OS maker should cater to such a niche demographic

The Mac itself is a "niche" demographic and always has been.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#333

Post by dylan604 »

rootsudo wrote: post #293
rorykoehler wrote: post #156

Earlier quoted context omitted.

Additionally charging on the left side ports makes the T2 chip overheat and crashes the machine on occasion.

REALLY? Okay, I'm going to test this. I noticed odd hangings and cpu hitting high temps on a MBP 2018' w/ dell usb C dock on left side, meanwhile right side is fine but I had to reboot randomly and sometimes it will just crash. And this is a MBP on a laptop stand.

I never had mine crash, but if I charge on the left hand side, the temp of the laptop increases to the point of needing the fan. Charging on the right hand side does not cause this problem. I had never paid attention to what side I was charging on until earlier this year when someone posted about it. After trying the right hand ports, I could see a difference.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#334

Post by novok »

Wowfunhappy wrote: post #116

I wonder if it would make sense for Little Snitch to continue supporting their kext-based solution in parallel to the new one, possibly only for users who are willing to disable SIP. You might argue that disabling SIP for a security product defeats the point, but I'm not sure if that's necessarily true. SIP effectively delegates trust away from the user and towards Apple, which is fine as a default—but the calculus m…

Eventually I don't think little snitch will even have apis to access stuff like that in the kernel as a kext as macos updates continue on.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#335

Post by fennecfoxen »

rootsudo wrote: post #293
rorykoehler wrote: post #156

Earlier quoted context omitted.

Additionally charging on the left side ports makes the T2 chip overheat and crashes the machine on occasion.

REALLY? Okay, I'm going to test this. I noticed odd hangings and cpu hitting high temps on a MBP 2018' w/ dell usb C dock on left side, meanwhile right side is fine but I had to reboot randomly and sometimes it will just crash. And this is a MBP on a laptop stand.

Docks on the left side, or similar devices which provide both power and send data, seem to be particularly problematic. On advice of my employer's IT department I went from "spinning up new VMs in VirtualBox reliably leads to thermal excess, CPU throttling, and total system shutdown" to a system that actually works -- just by moving the dock connection to the right side.

It's a little funny because the advice used to be you should use the left-side USB-C ports first because they were faster (both for data and charge, IIRC?)

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#336

Post by ryukafalz »

oatmealsnap wrote: post #258
kitsunesoba wrote: post #169

Earlier quoted context omitted.

I try the major DEs every few years to see if they fit me, most recently trying the newest KDE and GNOME versions in a VM about a month ago. Both have improved for sure, but they still have a long way to go… GNOME actually came closest but its customizability level is even lower than that of macOS, even factoring in extensions. Both suffer from a laundry list of minor annoyances that snowball into something that's ha…

Same experience. I tried, but Linux just isn’t ready to be used as a general OS right now. I’ve dug through message boards and bug reports, and a lot of the features that MacOS has will never be implemented. I’m taking about features released 13+ years ago on OS X 10.4.

> Same experience. I tried, but Linux just isn’t ready to be used as a general OS right now.

Highly, highly subjective. I use Linux as my main OS and have for many years.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#337

Post by [deleted] »

jjoonathan wrote: post #288
indymike wrote: post #70

Earlier quoted context omitted.

I just moved from Macos to Linux. The Linux desktop experience has improved a lot in the past five years (at least KDE has).

How is desktop search? Spotlight (mac desktop search) is a killer feature for me -- fast, reliable, smooth, all straight out of the box. Meanwhile, I've wasted many hours trying to get desktop search up to the same standard on Windows and Linux. That was years ago (for linux, at least), hopefully things have improved. How is linux desktop search doing today?

[deleted]

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#338

Post by novok »

dwrodri wrote: post #94
buzzerbetrayed wrote: post #34

Earlier quoted context omitted.

Not a pi-hole user, but what is the plan for pi-hole once encrypted dns is everywhere? Will it just be dead? I can’t really think of a way for it not to be.

The pi-hole software turns the Raspberry Pi into a DNS server, so you can point your own DNS server (i.e. the raspberry pi) at the DNS provider of your choosing so that it can resolve uncached queries. I don't think encryption matters because you control the sender (your PC), the first hop (the pi-hole), and the next resolution destination (Cloudflare/Quad9/Google/OpenDNS/etc.).

He is referring to the fact that apps will start ignoring local network DNS config and directly talk to their own hard coded DNS IPs.

I'm guessing the solution to that is to firewall various DNS IPs to force the app to use your local DNS. I could forsee apps going to random IPs for DNS and making it look like https, which will be hard to deal with.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#339

Post by rorykoehler »

dylan604 wrote: post #316
rorykoehler wrote: post #303

Earlier quoted context omitted.

I'm not sure. I have a 2019 mbp 16 with a dodgy logic board and while it crashes even without charging on the left it definitely crashes more often when charging on the left. I'm stuck in limbo because I need my machine for work. Will take it in when I have a break. Some threads https://discussions.apple.com/thread/250905859 https://forums.macrumors.com/threads/2019-16-inch-macbook-pr...

Are the Apple Stores in your area even open to take the laptop in? I have delayed my attempt to get my keyboard looked at because of Covid.

In Berlin everything is pretty much open (loosely enforced indoor mask and social distancing mandates). They’re not trying to eliminate the virus here like they do in Singapore or Australia. They track 3 values and depending on the scores they escalate or ease restrictions.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#340

Post by stallmanite »

dylan604 wrote: post #270
miguelmota wrote: post #257

Earlier quoted context omitted.

> Can you select a file in the whatever is the Linux desktop equivalent of Finder and hit the spacebar to get a quick look at the file native to the OS? Yes, I use pcmanfm on Linux and the spacebar will open the file in the default program. > Can I run the software I need to be able to make a living? Depends on what you do. If it's mostly design work and you require Adobe products then Linux is not a good choice. For…

>Yes, I use pcmanfm on Linux and the spacebar will open the file in the default program. That's not what QuickLook does. It allows the user to get a "quick look" at a file without launching a default application. Also, in macOS you get access to QuickLook from inside any application's Open dialog. That's a huge time saver when you have similar files and just need to see which one before doing a full open. Think large…

Dumb question: How does this differ from setting the view in the file selector to thumbnails?
Post reply on HN