3 ms·
As much as I'd like to believe it was just an oversight, how do you accidentally have your services bypass the firewall? That feels like it would have to be a d
by colejohnson66 6y ago
As much as I'd like to believe it was just an oversight, how do you accidentally have your services bypass the firewall? That feels like it would have to be a deliberate choice under the assumption that "our apps are signed by us, and the OS verifies that, so all traffic through these apps should be OK, right?" I don't mean this snarkily; it's a genuine question. I don't know how OSes work.
- Demiurge 6y agoPerhaps they wanted a bypass as system recovery option, or preference, not on by default.
- jtbayly 6y agoThat could really make sense of why you need a config file and it is just a simple bug at the same time.
- stretchcat 6y agoI don't see why half the shit in that list would be needed during a recovery process, let alone need to bypass a VPN as well. If Apple wants to claim this as their defense, let them. Until then, I see little value in dreaming up excuses they aren't willing to make for themselves.
- webmobdev 6y agoThey already have a "system recovery mode" where no such firewalls run, and only select system tools are available. There's also "safe mode".
- acdha 6y agoMy guess is that this started small (“we shouldn’t let firewalls block security updates or Find My Mac”) and once that mechanism was there people kept adding other things to it thinking about support (security filters are notorious for people blocking things without understanding the implications and then file big reports) but not the users who would be upset about not being able to block those services.