4 ms·
Last I looked... extensive telemetry and a sealed boot volume that makes it impractical to turn off even if theoretically possible. There are other problems o
by mixmastamyk 1y ago
Last I looked... extensive telemetry and a sealed boot volume that makes it impractical to turn off even if theoretically possible. There are other problems of course.
- TypesWillSaveUs 1y agoYou can disable SIP and even disable immutable kernel text, load arbitrary drivers, enable/disable any feature, remove any system daemon, use any restricted entitlements. The entire security model of macOS can be toggled off (csrutil from recoveryOS).
- mixmastamyk 1y agoAware of that. Way too big of a request just to make reasonable configuration changes, like shutting down daemons, etc.
- Klonoar 1y agoNo, it’s not that big a request. You literally have the capability. The average user does not need it. What is hard about this?
- mixmastamyk 1y agoStopping/disabling a service should be a command, like it is on Windows or Linux. Not configured on a read-only volume bundled with other security guarantees. It's pretty simple to keep these two things separate, like everywhere else in the present and history of the industry.
- Klonoar 1y agoJust because Windows/Linux do things one way doesn't mean the rest of the industry has to follow it. ;P
- niek_pas 1y agoJust out of curiosity, are these philosophical objections or do you have a practical use for disabling code signing and messing with your boot volume?
- mixmastamyk 1y agoI have practical use for disabling telemetry and other misfeatures. (Maybe you meant to reply to your sibling comment?)
- niek_pas 1y agoNo, I meant to reply to you. I was curious about your practical use case for disabling code signing (which I think is what you refer to by telemetry) and messing with the boot volume.
- mixmastamyk 1y agoNot what I am referring to. The goal is to disable misfeatures, not reduce security. Only Apple bundles the two.
- littlecranky67 1y agoHe's a religious linux believer that will make you call him GNU/Linux believer - no point in argueing, there is not interest in the argument.