News for hackers. Stuff that matters.
Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by addicted on Tuesday October 20, 2020 @05:24PM (#24842479)
Bottom line is that Apple made software like Little Snitch switch away from kexts and then built in behavior that was unexpected, which would not have been possible for them to do while Little Snitch was based on kexts.

Whether this is malicious, not malicious, secure, insecure etc. is irrelevant to whether this is an untrustworthy action. It’s not what one would reasonably expect and is therefore a betrayal of users’ trust.

If Apple switched gatekeeper on MacOS to completely remove the option and the workarounds to run unsigned apps, it would certainly be more secure. It would also be a huge betrayal of users’ trust in Apple and the MacOS platform.

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by dpkonofa on Tuesday October 20, 2020 @09:46PM (#24844110)
>is therefore a betrayal of users’ trust.

I would disagree with that statement. The user bought an Apple computer so they clearly trust Apple already. If anything, the new frameworks make the system more secure which strengthens that trust for users. The only people really affected by this change are users who want granular control over everything whether it comes from Apple or not.

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by nitrogen on Wednesday October 21, 2020 @01:45AM (#24845087)
This conflating of purchasing with trusting is harmful. It's an ongoing trend I've seen with large tech companies, with arguments of the form "You accept a tiny X, therefore your rejection of the giant Y is invalid."

We buy things from companies we don't implicitly trust all the time, because we can isolate and verify those things.

I don't always trust the supermarket to sell me non-moldy produce, but I can look at the produce and see whether it's moldy.

I don't trust oil companies not to destroy the environment, but if they sell me bad fuel it will be very clear.

I don't trust OS makers, but I can run firewalls and network sniffers to verify that the OS is behaving reasonably, and isolate it when it isn't. Until I can't.

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by simion314 on Wednesday October 21, 2020 @05:32AM (#24846147)
>The user bought an Apple computer so they clearly trust Apple

This is false, maybe I bought X because it was the least shitty choice.

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by dpkonofa on Thursday October 22, 2020 @08:31PM (#24864905)
That's fine but you bought it. When it comes down to it, America and capitalism run on the premise that you vote with your dollar. You voted with your dollar regardless of the mental gymnastics you did or didn't do to make that decision.