3 ms·
Well, let's not forget the little dance Apple did to make their programs and the system be able to bypass packet filters like Little Snitch... ... and then cla
by FireBeyond 2y ago
Well, let's not forget the little dance Apple did to make their programs and the system be able to bypass packet filters like Little Snitch...
... and then claim it was necessary for "updates and upgrades". Not sure why TextEdit.app needed a kernel network extension for "updates and upgrades".
They also denied it was possible until it was provably demonstrated that they did.
I like Apple stuff, everything I use is Apple. But too many see them as infallible or go to the whataboutism for missteps like these.
- flemhans 2y agoOddly enough, UTM VMs also bypass Little Snitch, making me wonder if you could always just bypass LS by running a VM in your evil app.
- wpm 2y agoWill it bypass it regardless of the virtualization engine, or only if you're using the Hypervisor framework for macOS VMs?
- frankjr 2y agoDepends on the network adapter in use. E.g. a bridged adapter will bypass it, an emulated vlan won't.
- lloeki 2y agoAh that clarifies things, I was confused for a moment. Well, the goal of a bridged net adapter for VMs is to make the VM as if it were physically plugged in directly into the network, independently of the host, so it makes sense for it not to be affected by a firewall. > running a VM in your evil app. IIRC back then, creating a bridged net adapter required a special entitlement (special as in you can't get it without explicitly asking Apple for it and the dev cert for it has additional entries, like for kernel extensions). Dunno if that's still the case.