2 ms·

> 1) They can't push software to my computer, because I've blocked the software update mechanism with Little Snitch They can because they (Apple) run in kernel

> 1) They can't push software to my computer, because I've blocked the software update mechanism with Little Snitch They can because they (Apple) run in kernel space and Little Snitch no longer does/can. So LS, god love it, only works because Apple lets it. If Apple wanted to they could push updates to your OS without LS knowing about it.

lapcat 2y ago
> They can because they (Apple) run in kernel space and Little Snitch no longer does/can. So LS, god love it, only works because Apple lets it. I already addressed this later in my comment: "And even when macOS bypassed Little Snitch one time a few years ago, that was detected by developers. The whole world is watching Apple closely, so the company can't simply get away with whatever they want undetected." > If Apple wanted to they could push updates to your OS without LS knowing about it. They could release an update that allows later updates to bypass Little Snitch, but they can't magically make that ability retroactive and get it on a Mac that doesn't currently have that update installed.
- sroussey 2y ago
  If you worry about Apple, then they thought you were a true adversary, they could install some code only for you. You really have no idea.
  - lapcat 2y ago
    I really have no idea what you're saying.
- 1over137 2y ago
  >They could release an update that allows later updates to bypass Little Snitch Or the ability could be there already without us knowing. But fortunately we can still run our own routers/switches and see outgoing traffic. If you configure LS to block everything then you could confirm it with your network gear.
  - lapcat 2y ago
    > Or the ability could be there already without us knowing. An empirically baseless conspiracy theory. > But fortunately we can still run our own routers/switches and see outgoing traffic. If you configure LS to block everything then you could confirm it with your network gear. That was my point. Apple isn't actually capable of completely avoiding detection. Anyway, just as I don't trust Apple absolutely, I don't distrust Apple absolutely either. They do some user-hostile things, which are richly deserving of criticism, but I prefer to engage with facts and evidence rather than idle speculation and paranoia.
    - 1over137 2y ago
      >An empirically baseless conspiracy theory. You misunderstand I think. I don't think it's likely. It would be easy to catch them. I also don't distrust Apple completely. I was (pedantically) replying to your comment that "They can't push software to my computer, because I've blocked the software update mechanism with Little Snitch". "Can't" is too strong. They could is what I'm saying, as in, they have the ability/possibility to do so. They can't time travel, because that's impossible. But they can establish network connections, because they control the firmware and kernel, which exceeds your control via Little Snitch.
      - lapcat 2y ago
        > I was (pedantically) replying to your comment Please don't be a pedant. It's not appreciated, and it only makes the conversation worse.
  - threeseed 2y ago
    > But fortunately we can still run our own routers/switches and see outgoing traffic. Which is useless if they simply encrypt the data before sending it over SSL. Then you will never know what they are sending to their servers.
    - 1over137 2y ago
      >Which is useless if they simply encrypt the data before sending it over SSL. Not entirely useless, you'd still know they were sending something and it would be proof they could bypass Little Snitch.

lapcat 2y ago

> They can because they (Apple) run in kernel space and Little Snitch no longer does/can. So LS, god love it, only works because Apple lets it. I already addressed this later in my comment: "And even when macOS bypassed Little Snitch one time a few years ago, that was detected by developers. The whole world is watching Apple closely, so the company can't simply get away with whatever they want undetected." > If Apple wanted to they could push updates to your OS without LS knowing about it. They could release an update that allows later updates to bypass Little Snitch, but they can't magically make that ability retroactive and get it on a Mac that doesn't currently have that update installed.

sroussey 2y ago
If you worry about Apple, then they thought you were a true adversary, they could install some code only for you. You really have no idea.
- lapcat 2y ago
  I really have no idea what you're saying.
1over137 2y ago
>They could release an update that allows later updates to bypass Little Snitch Or the ability could be there already without us knowing. But fortunately we can still run our own routers/switches and see outgoing traffic. If you configure LS to block everything then you could confirm it with your network gear.
- lapcat 2y ago
  > Or the ability could be there already without us knowing. An empirically baseless conspiracy theory. > But fortunately we can still run our own routers/switches and see outgoing traffic. If you configure LS to block everything then you could confirm it with your network gear. That was my point. Apple isn't actually capable of completely avoiding detection. Anyway, just as I don't trust Apple absolutely, I don't distrust Apple absolutely either. They do some user-hostile things, which are richly deserving of criticism, but I prefer to engage with facts and evidence rather than idle speculation and paranoia.
  - 1over137 2y ago
    >An empirically baseless conspiracy theory. You misunderstand I think. I don't think it's likely. It would be easy to catch them. I also don't distrust Apple completely. I was (pedantically) replying to your comment that "They can't push software to my computer, because I've blocked the software update mechanism with Little Snitch". "Can't" is too strong. They could is what I'm saying, as in, they have the ability/possibility to do so. They can't time travel, because that's impossible. But they can establish network connections, because they control the firmware and kernel, which exceeds your control via Little Snitch.
    - lapcat 2y ago
      > I was (pedantically) replying to your comment Please don't be a pedant. It's not appreciated, and it only makes the conversation worse.
- threeseed 2y ago
  > But fortunately we can still run our own routers/switches and see outgoing traffic. Which is useless if they simply encrypt the data before sending it over SSL. Then you will never know what they are sending to their servers.
  - 1over137 2y ago
    >Which is useless if they simply encrypt the data before sending it over SSL. Not entirely useless, you'd still know they were sending something and it would be proof they could bypass Little Snitch.