OvermindDL1

OvermindDL1

Apple's apps bypass firewalls like LittleSnitch and LuLu on MacOS

So it seems that Apple removed the network firewall API a while back and replaced it with another, firewall apps adapted, and come to find out the Apple official apps are bypassing that new interface in full, so the Firewall sees nothing.

Hackernews link at:

Most Liked

AstonJ

AstonJ

From the first comment:

Some people are smart, informed developers that install a trusted tool to monitor their traffic and have legitimate reasons to want to inspect Apple traffic. They’re dismayed.

Most people are the opposite and this move protects the most sensitive data from being easily scooped up or muddled in easily installed apps, or at least easily installed apps that don’t use zero days.

Then why can’t Apple just add something like LittleSnitch which allows us to decide? They are already doing this for things like giving apps access to certain files and folders by specifically asking for permission. Maybe it’s about time Apple offered us an ‘expert’ mode - and stopped lumping all users together?

For the most part I give apps zero access to the internet unless it’s something like a browser (and even then I do it per session if it’s not my regular browser). I find it really annoying when some apps want to periodically check their licence key too - they should only need to check it once per install or update. I really dislike the way apps collect data about us like its ok - it’s not.

This is one of the reasons I am not keen on VSCode - it keeps dialing out even tho I have turned off all the auto-updates etc (and also why I am thinking about giving Onivim a go).

Where Next?

Popular Macos topics Top

First poster: bot
Hackers jailbreak Apple’s T2 security chip powered by bridgeOS - Report Cyber Crime. The Apple T2 security chip has finally been jailbro...
New
OvermindDL1
So it seems that Apple removed the network firewall API a while back and replaced it with another, firewall apps adapted, and come to fin...
New
MikhailPertsev
Hi there! I am a new iMac user (this is the first Apple’s product for me), and I am wondering should I update the mac OS system to the n...
New
MikhailPertsev
Hi there! I recently bought a new mouse pad (HyperX Fury) and it feels like without mouse pad the magic mouse is working better(smoother...
New
AstonJ
As requested by @DevotionGeo, a thread about Apple’s patent regarding a new reconfigurable keyboard… Last month, Apple patented a ne...
New
First poster: AstonJ
https://twitter.com/patrickwardle/status/1349488392732491776 This thread was posted by one of our members via one of our news source t...
New
AstonJ
Just noticed this after the latest macOS update (11.3.1) - you can now set a low res (non-retina/HiDPR) mode: Handy if you need a 1:1...
New
AstonJ
Just upgraded to macOS Monterey (12.1) and finding ‘live text’ quite annoying! If anyone else wants to turn it off here’s how: System Pr...
New
AstonJ
For anyone else who finds the large number of recent items annoying when right-clicking the finder icon on Mac, simply: System Prefs &gt...
New
AstonJ
Just looking through my settings and noticed that Help Apple Improve Search was checked - yet I am almost certain that I did not opt-in t...
New

Other popular topics Top

AstonJ
There’s a whole world of custom keycaps out there that I didn’t know existed! Check out all of our Keycaps threads here: https://forum....
New
AstonJ
I ended up cancelling my Moonlander order as I think it’s just going to be a bit too bulky for me. I think the Planck and the Preonic (o...
New
Exadra37
I am asking for any distro that only has the bare-bones to be able to get a shell in the server and then just install the packages as we ...
New
AstonJ
Continuing the discussion from Thinking about learning Crystal, let’s discuss - I was wondering which languages don’t GC - maybe we can c...
New
PragmaticBookshelf
Build efficient applications that exploit the unique benefits of a pure functional language, learning from an engineer who uses Haskell t...
New
AstonJ
Was just curious to see if any were around, found this one: I got 51/100: Not sure if it was meant to buy I am sure at times the b...
New
New
First poster: bot
zig/http.zig at 7cf2cbb33ef34c1d211135f56d30fe23b6cacd42 · ziglang/zig. General-purpose programming language and toolchain for maintaini...
New
NewsBot
Node.js v22.14.0 has been released. Link: Release 2025-02-11, Version 22.14.0 'Jod' (LTS), @aduh95 · nodejs/node · GitHub
New
CommunityNews
Open-source implementation of the classic GTA engine now running directly in your browser. Experience the reVC technology demo on DOS.Zon...
New