News for hackers. Stuff that matters.
Re:macOS Big Sur Preview by swagonomixxx on Monday June 22, 2020 @04:16PM (#23605904)
> The way Catalina sends the hash of every binary you run to Apple.

Wait, what?! What are you referring to here? I just updated to Catalina and I wasn't aware of this.

Re:macOS Big Sur Preview by lou1306 on Monday June 22, 2020 @04:20PM (#23605952)
App notarization works by hashing binaries and sending said hashes to Apple. Here you go: https://lapcatsoftware.com/articles/catalina-executables.htm...
Re:macOS Big Sur Preview by swagonomixxx on Monday June 22, 2020 @05:06PM (#23606659)
What the actual f*ck. Thanks for the link. Looks like I'll need Little Snitch...
Re:macOS Big Sur Preview by Spivak on Monday June 22, 2020 @05:39PM (#23607090)
If you don’t trust your kernel I don’t think some dinky application-layer firewall is going to save you.
Re:macOS Big Sur Preview by tomschlick on Tuesday June 23, 2020 @12:40AM (#23609990)
How is this bad? They are likely sending a SHA-256 hash of the binary, not anything the binary itself to compare it to a bloom filter of known exploits. I'd expect any decent OS malware protection to be doing that.
Re:macOS Big Sur Preview by m463 on Monday June 22, 2020 @09:34PM (#23609073)
I tried installing little snitch on catalina and it needed a network connection exactly for that.

I would like to know how to disable this and install little snitch. Maybe spctl or csrutil?

Re:macOS Big Sur Preview by 72deluxe on Monday June 22, 2020 @08:08PM (#23608472)
Little Snitch is good but what happens if the kernel can’t get a binary approved to run??

And people complained about Windows 10 telemetry.

Last time I run macOS. Time to return to Linux (Pop OS I think)

Re:macOS Big Sur Preview by tebruno99 on Monday June 22, 2020 @04:21PM (#23605968)
It was all the rage in news a few weeks ago, and it is true. Apple sends the hash of every script and executable you run as part of its notification process (even command line commands & scripts)