6 ms·

What is point then to have such app all? if you can’t control _all_ connections then it appears useless. What is the proper solution? Something on router? Is th

What is point then to have such app all? if you can’t control _all_ connections then it appears useless. What is the proper solution? Something on router? Is there a way? Can Openwrt do the job of protecting privacy properly?

noname120 6y ago
“This solution is not completely perfect so it's absolutely worthless”.
- eternalban 6y ago
  "This lock doesn't really prevent unauthorized access to this room but you know, 'perfect is the enemy of good!'"
  - SamBam 6y ago
    That excessive. Installing a lock to which the building owner owns a key is still an improvement over not installing a lock at all. There's a difference between "All your connections are wide open, so any malicious or compromised software can connect to the web" and "Apple can connect to the web, so you have to decide whether to trust Apple." I mean, if you're on a mac and you don't trust Apple not to be secretly keylogging your passwords or something, I think a firewall isn't going to help you.
    - eternalban 6y ago
      Oh, the comment was only addressed to GP and a misused meme. It is -not- a comment on LuLu or the substantial and valuable contributions and efforts of the developer in question. Hats off to him. https://www.objective-see.com/ https://www.objective-see.com/
- hobs 6y ago
  As the solution worked before and they purposefully broke it, your statement is just idiotic.
sbarre 6y ago
I know this probably isn't what you're looking for, but for me personally the solution is to not upgrade past macOS 10.15, and to very likely not buy any more Mac laptops or desktops (after 15 years of being a Mac-first user). Obviously that's a personal choice, but for me losing that level of control of my desktop operating system - and seeing this as the start of a trend that will only get worse - is not acceptable, so I will look to other OSes to do my work. I'm sure Apple will continue to sell tons of Macs and that's fine...
- flemhans 6y ago
  I'm taking a more mild approach, switching to lugging two laptops around. One is for DevOps, accessing production systems, servers. That's where my ssh keys will reside. This will run qubes or maybe NixOS. Not sure yet. The Mac will be left for casual daily use, development (but no production keys), graphics design, fun, general browsing, chat, and whatnot. I'm still in the process of splitting all my tasks into what should be secure and what shouldn't. A nice side effect is that I won't be just as afraid of running a random "brew install" or install an app to check it out, since the Mac is anyway going to be low-security. Of course it's annoying to carry around two laptops, but completely switching to Linux just means I won't make it happen. Maybe some time...
  - stelcodes 6y ago
    I just installed nix on my 2011 Mac mini on High Sierra. With home-manager, it’s an incredibly capable brew replacement
  - sbarre 6y ago
    I actually switched to Windows, and I use WSL2 to run a really seamless Linux shell that lets me do all my dev work. So far it really has been the best of both worlds.. For my particular work, I haven't missed my Mac at all.. The developer experience has been basically identical.
  - lovelyviking 6y ago
    Of course it's annoying to carry around two laptops, but completely switching to Linux just means I won't make it happen. Maybe some time... Unfortunately this setup will not always work with the mobility requirement. May be some small linux box instead ? But which one ?
webmobdev 6y ago
It should be possible to block the IPs these Apple wares connect to. Currently the easiest solution I have found is ProtonVPN, which claims to block them - https://protonvpn.com/blog/big-sur-exclusion-list/ https://protonvpn.com/blog/big-sur-exclusion-list/ . (Ofcourse, the best solution is to not upgrade macOS and stick with macOS Mojave).
- lovelyviking 6y ago
  I tried to block some of the ip-s Mac was connecting to and then apps had stopped working. Back then I thought I did something wrong and didn’t have time to test it further but in light of recent events It could be I have stumbled on the issue with getting permissions for each app that made a lot of ‘good publicity’ for apple...
perryizgr8 6y ago
> What is the proper solution? Use a better OS. Seriously, just use Linux if you want that level of control. Most users are happy to give up control in exchange for pretty graphics, easy UI, etc.
- lovelyviking 6y ago
  I would agree actually. I learn linux, but to get into the depths takes some time. It’s not even easy to choose which one to use. And I have code written for Mac platform, that I need to finish. (I’ve described my situation above https://news.ycombinator.com/item?id=25778247 https://news.ycombinator.com/item?id=25778247 )

noname120 6y ago

“This solution is not completely perfect so it's absolutely worthless”.

eternalban 6y ago
"This lock doesn't really prevent unauthorized access to this room but you know, 'perfect is the enemy of good!'"
- SamBam 6y ago
  That excessive. Installing a lock to which the building owner owns a key is still an improvement over not installing a lock at all. There's a difference between "All your connections are wide open, so any malicious or compromised software can connect to the web" and "Apple can connect to the web, so you have to decide whether to trust Apple." I mean, if you're on a mac and you don't trust Apple not to be secretly keylogging your passwords or something, I think a firewall isn't going to help you.
  - eternalban 6y ago
    Oh, the comment was only addressed to GP and a misused meme. It is -not- a comment on LuLu or the substantial and valuable contributions and efforts of the developer in question. Hats off to him. https://www.objective-see.com/ https://www.objective-see.com/
hobs 6y ago
As the solution worked before and they purposefully broke it, your statement is just idiotic.

sbarre 6y ago

I know this probably isn't what you're looking for, but for me personally the solution is to not upgrade past macOS 10.15, and to very likely not buy any more Mac laptops or desktops (after 15 years of being a Mac-first user). Obviously that's a personal choice, but for me losing that level of control of my desktop operating system - and seeing this as the start of a trend that will only get worse - is not acceptable, so I will look to other OSes to do my work. I'm sure Apple will continue to sell tons of Macs and that's fine...

flemhans 6y ago
I'm taking a more mild approach, switching to lugging two laptops around. One is for DevOps, accessing production systems, servers. That's where my ssh keys will reside. This will run qubes or maybe NixOS. Not sure yet. The Mac will be left for casual daily use, development (but no production keys), graphics design, fun, general browsing, chat, and whatnot. I'm still in the process of splitting all my tasks into what should be secure and what shouldn't. A nice side effect is that I won't be just as afraid of running a random "brew install" or install an app to check it out, since the Mac is anyway going to be low-security. Of course it's annoying to carry around two laptops, but completely switching to Linux just means I won't make it happen. Maybe some time...
- stelcodes 6y ago
  I just installed nix on my 2011 Mac mini on High Sierra. With home-manager, it’s an incredibly capable brew replacement
- sbarre 6y ago
  I actually switched to Windows, and I use WSL2 to run a really seamless Linux shell that lets me do all my dev work. So far it really has been the best of both worlds.. For my particular work, I haven't missed my Mac at all.. The developer experience has been basically identical.
- lovelyviking 6y ago
  Of course it's annoying to carry around two laptops, but completely switching to Linux just means I won't make it happen. Maybe some time... Unfortunately this setup will not always work with the mobility requirement. May be some small linux box instead ? But which one ?

webmobdev 6y ago

It should be possible to block the IPs these Apple wares connect to. Currently the easiest solution I have found is ProtonVPN, which claims to block them - https://protonvpn.com/blog/big-sur-exclusion-list/ https://protonvpn.com/blog/big-sur-exclusion-list/ . (Ofcourse, the best solution is to not upgrade macOS and stick with macOS Mojave).

lovelyviking 6y ago
I tried to block some of the ip-s Mac was connecting to and then apps had stopped working. Back then I thought I did something wrong and didn’t have time to test it further but in light of recent events It could be I have stumbled on the issue with getting permissions for each app that made a lot of ‘good publicity’ for apple...

perryizgr8 6y ago

> What is the proper solution? Use a better OS. Seriously, just use Linux if you want that level of control. Most users are happy to give up control in exchange for pretty graphics, easy UI, etc.

lovelyviking 6y ago
I would agree actually. I learn linux, but to get into the depths takes some time. It’s not even easy to choose which one to use. And I have code written for Mac platform, that I need to finish. (I’ve described my situation above https://news.ycombinator.com/item?id=25778247 https://news.ycombinator.com/item?id=25778247 )