5 ms·

I'd probably stick with the firewall just to be safe, thorough, and future-proofed...

by c22 4y ago

gjsman-1000 4y ago
Well... macOS is hardly the worst IoT offender. Roku is unbelievable. ;) Many good reasons to set up a Pi-Hole...
Xylakant 4y ago
You’d need a network level firewall for that - the OS can circumvent any firewall you run on your computer. That would imply that you’re unprotected once you leave your home network. The firewall would also need to inspect all network traffic, including TLS secured connections.
- deleted 4y ago
  [deleted]
VWWHFSfQ 4y ago
Apple allows itself to bypass the OS firewall so you will need something at the network level.
- sundvor 4y ago
  .. on every single network you connect your computer to. Maybe there is such a thing as a portable battery powered wireless travel router with proper firewall rules, that can also do VPN etc. Must admit that's something I never looked into.
djur 4y ago
Using a firewall to protect your privacy from the company that designed the hardware and wrote the software for your computer is kind of like putting on a raincoat before going swimming.
- ok123456 4y ago
  Why do they deserve any trust when they're phoning home?
  - scarface74 4y ago
    The person you are replying to is saying that at some level you have to trust someone and “open source” is not the answer. There have been plenty of latent bugs in Linux that took years to discover that could have led to information extraction
    - ok123456 4y ago
      "Every platform has RVEs eventually" is a pretty lazy answer. The answer is to stop normalizing telemetry and data exfiltration even if it's 'the good guys' doing it. It's not your "cloud" therefore it's not your data.
      - scarface74 4y ago
        So if you are not going to trust anyone are you going to stop using computers?
        ok123456 4y ago
        No. Just don't use "cloud" "services" like this or LassPass.
    - djur 4y ago
      No, that's not what I'm saying. I think it's conceivable that with a great deal of effort you could build an open source system that is highly trustworthy. What I'm saying is that the gradient between "highly trustworthy" and "untrustworthy" is extremely steep. To use another analogy, someone using a firewall to keep a MacBook from phoning home is like a person who invests in a really high-quality lock on their jewelry box to keep their housecleaner from stealing from them.

I'd probably stick with the firewall just to be safe, thorough, and future-proofed...

by c22 4y ago

I'd probably stick with the firewall just to be safe, thorough, and future-proofed...

gjsman-1000 4y ago

Well... macOS is hardly the worst IoT offender. Roku is unbelievable. ;) Many good reasons to set up a Pi-Hole...

Xylakant 4y ago

You’d need a network level firewall for that - the OS can circumvent any firewall you run on your computer. That would imply that you’re unprotected once you leave your home network. The firewall would also need to inspect all network traffic, including TLS secured connections.

deleted 4y ago
[deleted]

VWWHFSfQ 4y ago

Apple allows itself to bypass the OS firewall so you will need something at the network level.

sundvor 4y ago
.. on every single network you connect your computer to. Maybe there is such a thing as a portable battery powered wireless travel router with proper firewall rules, that can also do VPN etc. Must admit that's something I never looked into.

djur 4y ago

Using a firewall to protect your privacy from the company that designed the hardware and wrote the software for your computer is kind of like putting on a raincoat before going swimming.

ok123456 4y ago
Why do they deserve any trust when they're phoning home?
- scarface74 4y ago
  The person you are replying to is saying that at some level you have to trust someone and “open source” is not the answer. There have been plenty of latent bugs in Linux that took years to discover that could have led to information extraction
  - ok123456 4y ago
    "Every platform has RVEs eventually" is a pretty lazy answer. The answer is to stop normalizing telemetry and data exfiltration even if it's 'the good guys' doing it. It's not your "cloud" therefore it's not your data.
    - scarface74 4y ago
      So if you are not going to trust anyone are you going to stop using computers?
      - ok123456 4y ago
        No. Just don't use "cloud" "services" like this or LassPass.
  - djur 4y ago
    No, that's not what I'm saying. I think it's conceivable that with a great deal of effort you could build an open source system that is highly trustworthy. What I'm saying is that the gradient between "highly trustworthy" and "untrustworthy" is extremely steep. To use another analogy, someone using a firewall to keep a MacBook from phoning home is like a person who invests in a really high-quality lock on their jewelry box to keep their housecleaner from stealing from them.