Live data from Hacker News

Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

twitter.com

91–100 of 649 posts

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#91
post #11

So? Users expect basic OS functionality (like the App Store, Maps, etc) to function. Do people really install Little Snitch (which I've used since 2005 or so) for blocking Apple's own apps?

Firewall users expect the 'App Store, Maps, etc.' to not function if not configured to be allowed through the firewall.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#92

Earlier quoted context omitted.

If you don’t trust Apple then you need something more than little snitch. Apple is responsible for both hardware and OS. What delta in security or trust is little snitch going to offer over Apple?

In this situation the question isn’t about whether or not Apple can be trusted. Apple has clearly betrayed users’ trust in this situation. People don’t install Little Snitch only to prevent nefarious third party activity. Some may want to know what traffic is going to and from their computers. Other may want to block all traffic for testing and/or research purposes. I can trust that Apple is not doing something nefar…

> Apple has clearly betrayed users’ trust in this situation.

That's a perfectly reasonable opinion to hold, but 99.9% of macOS users won't know the difference and will be safer for it.

Some of the folks who know the difference will also be fine with it. FWIW, I've used Little Snitch (only to prevent nefarious third party activity), and its biggest UX problem is that it treats legitimate OS traffic no differently than untrusted traffic.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#93
A good lesson for the anti-FLOSS crowd so heavily present in this website.

I'll be the first to admit Linux desktops are full of flaws (although there are other options), just like every other OS but they could be fixed given enough money or maybe you could be the one that write that code.

But an OS that is not FLOSS will always work against their users and restrict their freedom. It's also a big joke that they have so many ads talking about privacy, when they are just as bad as their rivals. I do understand that not everyone has a choice because specialized software that they need for professional use could be available only in other platforms and that's unfortunately.

I don't expect an utopic world where everything is FLOSS but the OS is too important to be closed. It will only get worse with time.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#94

That’s annoying yet pretty predictable, at least we’ve still got https://pi-hole.net/ as an option until DNS encryption becomes widespread :/

Not a pi-hole user, but what is the plan for pi-hole once encrypted dns is everywhere? Will it just be dead? I can’t really think of a way for it not to be.

The pi-hole software turns the Raspberry Pi into a DNS server, so you can point your own DNS server (i.e. the raspberry pi) at the DNS provider of your choosing so that it can resolve uncached queries.

I don't think encryption matters because you control the sender (your PC), the first hop (the pi-hole), and the next resolution destination (Cloudflare/Quad9/Google/OpenDNS/etc.).

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#95
post #28

Earlier quoted context omitted.

Dont pray, just dont buy Apple Products

The alternative is what? System76 makes a decent laptop but they don’t have a repair center in every major city. I buy Apple computers because of the hardware support and integration with iPhone. Speaking of iPhone, the open options are at best abysmal for privacy (at least orders of magnitudes worse than Apple) and at worst part of planned obsolescence that creates e-waste much faster than Apple devices. Fun fact, a…

>Fun fact, at least for now, you can still buy a Mac and boot Linux.

Are you praing too that Apple will still allow that in the future?

>I buy Apple computers because of the hardware support and integration with iPhone

Have fun then, i dont buy Think different but same.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#96
post #19
post #11

So? Users expect basic OS functionality (like the App Store, Maps, etc) to function. Do people really install Little Snitch (which I've used since 2005 or so) for blocking Apple's own apps?

It is a firewall, i should be able to decide what goes in and out of my computer

Realistically, you have two options: to use Linux or to trade your control and freedom for convenience.

In case the control and freedom are important for you, why not to switch to Linux, purchase Pinephone or Librem, use DD-WRT/VyOS/pfSense for your router?

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#97
post #16

This is a big breach of trust in terms of Apple always being on the side of user privacy. If someone knows enough to install these firewall apps, then they know enough to figure out what they want to enable/disable even for Apple applications. If Apple thinks certain rules cause issues, they certainly could work with the developer of these apps to educate users of adverse effects when certain things cause unintended…

I would love if there would be a small appliance based on a raspberry pi zero or something of similar size, that could be controlled/configured from an app on your phone. This device would be powered through a usb cable (no data) from your laptop, and act as a WiFi hotstpot that you can use to route all your traffic via the VPN or network of your choice. Even if your laptop would be infected by malware or a rootkit,…

https://firewalla.com/ might be it, though I am sure there are other similar products.

Disclaimer: I work on a similar product but for smartphones.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#98
post #45

Earlier quoted context omitted.

Oh wow! This probably explains why every now and then when I wake my MacBook Pro from sleep it says no keyboard is connected! I thought I had some hardware problem on a basically brand new machine. Glad to hear it's only a stupid software problem!

If you're using Cisco Anyconnect, blame that for that particular keyboard issue.

Ugh, Cisco AnyConnect, had my MDM policy erroneously install the 32-bit version of it and removing it required finding a shell script in /opt/cisco and running to deregister it before I could install the updated version. So much fun!

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#99
post #28

Earlier quoted context omitted.

Dont pray, just dont buy Apple Products

Boycotting is not an effective strategy for addressing oligopolies. You need actual strong anti-trust regulation.

Regulation will never be ahead of corporations. Regulators always play catch-up. Seeing how, at the end of the day, all these company care about is profits, hitting them where it hurts will make a difference.

That being said, Linux is available, and it's perfectly usable by people who would be bothered by Apple's dev policies.

Re: Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

#100
post #21

Apple seems to do all kinds of weird networking _stuff_. For instance, during wakeup, your T2 equipped Macbook will wait for a DNS response and then use said DNS response to synchronize time via NTP before letting the user use the keyboard. Probably checking timestamps on signatures for the keyboard firmware, or something stupid like that. This only happens if it happens to have a default route. Similarly, all macOS…

Apple touted the T2 chip as the bee's knees in security. Now, we have a vulnerability that cannot be defended against. However, Apple went all in on the security of this T2 chip so that you cannot replace the SSD (besides the method to manufacture). I appreciate the desire at making a device difficult for a bad actor to get to your data, but they epicly failed and ultimately only made an user-hostile device. Oh, and the laptops with these chips also had the world's worst keyboard. Absolute trash.
Post reply on HN