4 ms·

There is some reprieve by using a good firewall or even an off device firewall. However with many of these services if you try to kill them, they come back. If

• GekkePrutser 5y ago
  Also, Apple is making it virtually impossible to make changes to the OS now with the sealed system volume. We as the operator have no workable way of making changes there. You can do the whole bless thing but you have to boot into several modes several times. For every update. Otherwise it won't even boot. I think this is a worrying development. Until now our computers were actually ours. Now they're controlled by the vendor, and looking over our shoulder. I think using the user's own device to spy on them (whatever the reason!) is a big red line to cross. And puts this stricter control over the OS in a different perspective than just "security". I think either thing that plays into it is that Apple is now a content provider (Apple music and TV+). So they have another reason to keep us out to protect their DRM. But anyway, good security should not have to imply trusting the vendor implicitly. Give us the ability to add our own signing key for files we want to modify, just like secure boot on Windows allows adding custom keys..
• xanaxagoras 5y ago
  I did some testing yesterday. It used to be if you blocked 17.0.0.0/8 (or a more restrictive subset for OCSP) on your router, it would take ~30 seconds to open a program. It's a lot faster now. The only thing that really leaps out at me is some programs I haven't launched in a long time go through that "Verifying..." step to launch where it calculates checksums.