Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

twitter.com

Post reply on HN
Print view View original

611–620 of 649 posts

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#611

Post by codezero »

eptcyka wrote: post #467
codezero wrote: post #430

Earlier quoted context omitted.

The keyboard thing is new to me, wow that sucks. The other one sounds like a workaround for captive portals. I think there is some documentation on that wrt Safari and the built in networking, but it was mostly a workaround needed to deal with wifi hotspots that intercept dns until you pay/subscribe, and it causes safari to look hung - so they had to make it clear it wasn’t their browser hanging since it couldn’t mak…

Cool, can you reference some docs or any communication from Apple re the captive portal workarounds? It feels rather heavy handed as there are ways other systems have worked around this that don't hijack routes.

I don’t work for Apple, you might ask their developer support.

A quick search for Captive Network Assistant shows it’s not documented.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#612

Post by chrisshroba »

GekkePrutser wrote: post #356
chrisshroba wrote: post #129

Earlier quoted context omitted.

For what it's worth, my hacky solution to this is this script which kills all the background processes that use significant bandwidth. If you're interested in how I came up with the list of processes, I can share the BitBar [1] script I wrote for monitoring per-process network usage (I wrote a small wrapper around nettop that logs to a db, which is read periodically by my BitBar script to show me the per-process usag…

Won't Launchd simply start them all up again? It'll be simpler to disable the launchDaemons :P And really, put a sleep in there of at least a second or so or this'll be a huge resource hog.

> Won't Launchd simply start them all up again?

Yeah, that's why it's running an infinite loop heh

> It'll be simpler to disable the launchDaemons

Simpler that just nuking them with kill -9? No way. Better in literally every other way? Absolutely

> or this'll be a huge resource hog

That's a fair suggestion, but I'm seeing 0.0 CPU and MEM consumption, so I'm not too concerned

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#613

Post by schwartzworld »

_qulr wrote: post #610
strogonoff wrote: post #609

Earlier quoted context omitted.

> And let's never forget, Apple has been actively collaborating with authoritarian governments to shut down pro-democracy activism. That's not just a theoretical possibility, it actually happened. I wonder why any time I see these claims, they’re never accompanied by anything resembling reliable evidence. > The whole "We can trust Apple with our data" line starts with a flawed assumption: that Apple should be allowed…

> I wonder why any time I see these claims, they’re never accompanied by anything resembling reliable evidence. Because the stories have been on all the news sites, it's common knowledge, and thus it would be superfluous to submit detailed documentation every time it's mentioned? I can't help it if you're not informed about politics and tech. > you on the other hand are free to vote with your wallet and your time by…

> people always say stuff like that, but do they mean it?

no of course not. it's a pointless thing to say, equivalent to "if you don't like the laws in America, move somewhere else." Easier said than done, for starters.

But also, if developers and power users aren't allowed to criticize or give feedback than who is? Apple needs us more than we need it, so of course you should have a voice

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#614

Post by j45 »

This might mean running firewalls on the local networks which block outgoing traffic to Apple. And possibly keeping Apple devices vpned to such a network.

I was looking forward to new Apple devices, but feel uncertain about the "trust Apple but no one else" approach.

Concerns:

1) Apple devices have been configurable to be respectful if not invisible in corporate or client windows networks.

You could use a Mac with a firewall in windows environments without being worried about setting off something on the network for unusual traffic. Especially for environments that don't support some but don't stop it either.

2) Corporate Windows networks can control the monitoring of telemetry and metadata to a higher degree than Apple now seems to. It could be a new gap in Apple when compared to others.

If the above are true, it's not clear if Apple sees few Mac users in any corporate environment as an opportunity to grow, it's only accelerating the consideration of other operating systems.

Apple also appears to be signaling that devices do not belong to the customer. The idea of we will protect your data, but trust your data to our policies, which we can change seems confusing. I'm considering the new iPhone for security, but this workaround seems like an affront to it.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#615

Post by dylan604 »

jasonv wrote: post #538
dylan604 wrote: post #480

Earlier quoted context omitted.

The one thing the newer machines have are better discrete GPUs. Everything now will use the GPU from web browsing to full on video/photo editing and color correction. Your 2012 GPU might as well be hanging out with Moses its so old in GPU years. The speed difference you'll see in a photo edit standpoint will justify your upgrade. If you are even halfway serious about using Resolve, you cannot put enough GPU power in…

Can you expand on, or link to, multiple GPUs for photo and video editing?

https://documents.blackmagicdesign.com/ConfigGuides/DaVinciR...

There's an entire guide provided by BMD that tells you exactly what products are compatible with your OS and particular computer. It even comes as included documentation with the installer. You know, those PDFs in the folder with the install app that nobody looks at? After Apple's nixing Nvidia from their platform, you're limited to AMD GPUs for Mac. For PC, have more options. For Linux, you can go absolutely nuts with the amount of GPU since you can utilize some of the GPU appliances rather than PCIe boards.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#616

Post by radlad »

Dylan16807 wrote: post #485
radlad wrote: post #479

Earlier quoted context omitted.

I'm not trying to defend Apple here, just explain the mechanism to the parent.

Oh, okay. You said "must" so I was wondering if there was another important factor.

Sorry, that wasn't the best word choice. Certainly a counter is another viable way of performing that check. (And obviously comes with its own set of trade-offs which I'm not interested in performing value judgments on!)

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#617

Post by AnthonyMouse »

MagnumOpus wrote: post #591
andreareina wrote: post #542

Earlier quoted context omitted.

I disagree that it's reasonableness except in the short term. We're seeing a change in developers' opinions; my friends in video production were getting ready to ditch Apple due to their "professional" software and hardware products getting worse both in relative (hardware) and absolute (software) terms. Part of the Apple cachet is that these are professional tools; how long is their reputation going to hold up if th…

Both the tech-bro and the media production audience are now a rounding error of a rounding error for Apple. It is a consumer luxury brand first and foremost, and it derives 99% of net income from that. Catering to dorks in basements is a tiny legacy business and the support level for it is commensurate. (It probably actually only exists because Apple has its own share of dorks in basements.)

That's assuming nobody cares about the opinions of tech people when they're buying tech.

It's not just that tech people are customers, it's that ten other customers will look at what the tech people are carrying and assume they're the ones to know what's good.

And developers write code for the platform they actually use first. And spend time fixing the problems with that platform that are keeping other people from using it. Then more non-developers switch to it because it's improving.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#618

Post by miguelmota »

dylan604 wrote: post #270
miguelmota wrote: post #257

Earlier quoted context omitted.

> Can you select a file in the whatever is the Linux desktop equivalent of Finder and hit the spacebar to get a quick look at the file native to the OS? Yes, I use pcmanfm on Linux and the spacebar will open the file in the default program. > Can I run the software I need to be able to make a living? Depends on what you do. If it's mostly design work and you require Adobe products then Linux is not a good choice. For…

>Yes, I use pcmanfm on Linux and the spacebar will open the file in the default program. That's not what QuickLook does. It allows the user to get a "quick look" at a file without launching a default application. Also, in macOS you get access to QuickLook from inside any application's Open dialog. That's a huge time saver when you have similar files and just need to see which one before doing a full open. Think large…

I see. Not exactly the same but Sushi on GNOME file managers might be the closest thing

https://www.omgubuntu.co.uk/gnome-sushi-mac-quick-for-ubuntu

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#619

Post by hombre_fatal »

wtf_srsly wrote: post #345
hombre_fatal wrote: post #314

Earlier quoted context omitted.

Apple has a three year warranty which means yours may have run out or is about to run out. If you still have time, get your keyboard replaced for free: https://support.apple.com/keyboard-service-program-for-mac-n... (it also means they have to replace your mobo and battery due to brilliant Apple engineering). It doesn't fix the problem, but it resets the clock until they fall off again. In Texas, it was <48 hours bet…

48 hours is pretty optimistic. At least for the 2016 model they can't just change the keycaps but they'll have to change the whole bottom case. This took a few weeks for me since I had to send it to a certified repair center.

That's the same for the 2017 model that I had to fix. I got a new mobo + battery. Convenient because my battery was in dire need to servicing.

I heard it would take weeks and even had a backup laptop ready, so it surprised me when it came Oh well, the new models don't have this issue anymore. What a fuck up.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#620

Post by wool_gather »

Spivak wrote: post #421
tpxl wrote: post #412

Earlier quoted context omitted.

>hiding URLs does protect users from phishing Real question: how? I would expect it to be the opposite, a perfect phishing site will have the wrong URL.

Because it's not really "hiding the URL" despite what all the outrage bloggers tried to make it seem. It's by default (i.e. until you tap/click it) hiding the parts of the URL that the site controls. So paypal.amazon.citibank.scamsite.biz/secure/login/trustus will just show scamsite.biz.

Safari does not behave as you've described. The subdomain (for example, 'gist' in 'gist.github.com') is displayed.
Post reply on HN