5 ms·

I use little snitch for this, but I agree, a big hammer, and likely more hoops for regular developers to jump through. Notarisation, signing, forced developer k

• post_break 4y ago
  Little Snitch is great. Apple would never allow it on iOS which is ridiculous.
  • CharlesW 4y ago
    It's not the same, but have you used App Privacy Report to monitor what your iOS apps are doing? https://www.wired.com/story/ios-15-app-privacy-report/ https://www.wired.com/story/ios-15-app-privacy-report/
    • mcculley 4y ago
      The App Privacy Report is great, but too late. It shows you what an app did, not what it might do.
    • criddell 4y ago
      Thanks for posting this. I just turned it on and am looking forward to the report. It's under Settings > Privacy > App Privacy Report.
• mcculley 4y ago
  I use Little Snitch on macOS, but it is not available on iOS, so far as I know. Normal apps on iOS do not have enough visibility into the system for that.
  • jeroenhd 4y ago
    Android exposes a soft VPN API that firewall apps can use to block network traffic for certain apps in certain scenarios (say, no Google Play updates when on mobile data) with apps like Netguard [1]. Does iOS not expose such functionality? Surely there's some kind of VPN API? [1]: https://github.com/M66B/NetGuard https://github.com/M66B/NetGuard
    • FireBeyond 4y ago
      Not like that. The idea is antithetical to Apple, who have said during keynotes that they've tried to avoid doing so, because what they really want is a world where the concept of "mobile data" is not limiting.
    • mcculley 4y ago
      iOS has APIs for VPNs and “content blockers”. But as far as I know, such a filter has no access to know which process/application is trying to make a connection. Little Snitch on macOS has to install code into kernel space. (Or at least it used to; I have not reinstalled in a long time.) The Android app you link to seems to have the functionality I think should exist as a built-in. It needs to be built-in so that non-geeks can use it. Just as users are asked the first time an application attempts to use the microphone and are able to prevent it before it starts, they should be able to limit network access and revoke it at any time. (I don’t think users should be necessarily be forced to approve Internet access for every app install. Just make it possible to revoke in the global Settings widget and encourage users to think about personal data and Internet access being mutually exclusive.)
    • mathisonturing 4y ago
      Android has app system level options in the settings to disable WiFi/mobile data. I tend to use that, and use Netguard as a fallback because the latter has an off by default config incase I forget to disable it for new apps. Netguard on its own is insufficient because sometimes you'd need to use an actual VPN (which turns off Netguard)
      • infthi 4y ago
        I've had those options on multiple OnePlus phones, but they were not present on multiple Pixels. Since Pixels are usually sold as "AOSP experience with Google flavor" are lacking this feature - I am not sure if that is that feature comes from AOSP or is only present on OnePlus phones.
        • jeroenhd 4y ago
• radicaldreamer 4y ago
  None of which is particularly effective since it's trivial to setup a legal entities that makes one game but signs a bunch of malware (or steal enterprise keys).