OvermindDL1

OvermindDL1

Apple's apps bypass firewalls like LittleSnitch and LuLu on MacOS

So it seems that Apple removed the network firewall API a while back and replaced it with another, firewall apps adapted, and come to find out the Apple official apps are bypassing that new interface in full, so the Firewall sees nothing.

Hackernews link at:

Most Liked

AstonJ

AstonJ

From the first comment:

Some people are smart, informed developers that install a trusted tool to monitor their traffic and have legitimate reasons to want to inspect Apple traffic. They’re dismayed.

Most people are the opposite and this move protects the most sensitive data from being easily scooped up or muddled in easily installed apps, or at least easily installed apps that don’t use zero days.

Then why can’t Apple just add something like LittleSnitch which allows us to decide? They are already doing this for things like giving apps access to certain files and folders by specifically asking for permission. Maybe it’s about time Apple offered us an ‘expert’ mode - and stopped lumping all users together?

For the most part I give apps zero access to the internet unless it’s something like a browser (and even then I do it per session if it’s not my regular browser). I find it really annoying when some apps want to periodically check their licence key too - they should only need to check it once per install or update. I really dislike the way apps collect data about us like its ok - it’s not.

This is one of the reasons I am not keen on VSCode - it keeps dialing out even tho I have turned off all the auto-updates etc (and also why I am thinking about giving Onivim a go).

Where Next?

Popular Macos topics Top

New
New
Exadra37
On modern versions of macOS, you simply can’t power on your computer, launch a text editor or eBook reader, and write or read, without a ...
New
AstonJ
Thought it might be interesting to have a thread for any unusual bugs we might come across…
New
New
New
AstonJ
As requested by @DevotionGeo, a thread about Apple’s patent regarding a new reconfigurable keyboard… Last month, Apple patented a ne...
New
CommunityNews
Over the past decade, a large and opaque industry has been amassing increasing amounts of personal data.1,2 A complex ecosystem of websi...
New
AstonJ
Just noticed this after the latest macOS update (11.3.1) - you can now set a low res (non-retina/HiDPR) mode: Handy if you need a 1:1...
New
AstonJ
Just looking through my settings and noticed that Help Apple Improve Search was checked - yet I am almost certain that I did not opt-in t...
New

Other popular topics Top

AstonJ
If it’s a mechanical keyboard, which switches do you have? Would you recommend it? Why? What will your next keyboard be? Pics always w...
New
PragmaticBookshelf
Take your Go skills to the next level by learning how to design, develop, and deploy a distributed service. Start from the bare essential...
New
PragmaticBookshelf
Brace yourself for a fun challenge: build a photorealistic 3D renderer from scratch! In just a couple of weeks, build a ray tracer that r...
New
PragmaticBookshelf
Write Elixir tests that you can be proud of. Dive into Elixir’s test philosophy and gain mastery over the terminology and concepts that u...
New
Exadra37
Please tell us what is your preferred monitor setup for programming(not gaming) and why you have chosen it. Does your monitor have eye p...
New
AstonJ
I’ve been hearing quite a lot of comments relating to the sound of a keyboard, with one of the most desirable of these called ‘thock’, he...
New
New
foxtrottwist
A few weeks ago I started using Warp a terminal written in rust. Though in it’s current state of development there are a few caveats (tab...
New
DevotionGeo
I have always used antique keyboards like Cherry MX 1800 or Cherry MX 8100 and almost always have modified the switches in some way, like...
New
AstonJ
If you’re getting errors like this: psql: error: connection to server on socket “/tmp/.s.PGSQL.5432” failed: No such file or directory ...
New