3 ms·
Oddly enough, UTM VMs also bypass Little Snitch, making me wonder if you could always just bypass LS by running a VM in your evil app.
by flemhans 2y ago
Oddly enough, UTM VMs also bypass Little Snitch, making me wonder if you could always just bypass LS by running a VM in your evil app.
- wpm 2y agoWill it bypass it regardless of the virtualization engine, or only if you're using the Hypervisor framework for macOS VMs?
- frankjr 2y agoDepends on the network adapter in use. E.g. a bridged adapter will bypass it, an emulated vlan won't.
- lloeki 2y agoAh that clarifies things, I was confused for a moment. Well, the goal of a bridged net adapter for VMs is to make the VM as if it were physically plugged in directly into the network, independently of the host, so it makes sense for it not to be affected by a firewall. > running a VM in your evil app. IIRC back then, creating a bridged net adapter required a special entitlement (special as in you can't get it without explicitly asking Apple for it and the dev cert for it has additional entries, like for kernel extensions). Dunno if that's still the case.