Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by tssva on Tuesday October 20, 2020 @08:30PM (#24843750)

TLS makes this difficult today and SNI encryption will make this next to impossible without installing a custom ca certificate and doing MITM. Even that isn't helpful when you are using a laptop that may not always be on the network where you have deployed a device for inspection. Better to be able to inspect or block on the device by application.

[ Parent | on HN ]

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by tialaramex on Wednesday October 21, 2020 @02:33AM (#24845274)

I would be astonished if Apple doesn't at least experiment with key pinning for the services it has decided to "protect" in this way.

If pinning is used then you can't interfere by interposing a middlebox, the connection would just fail. I guess it's possible Apple would find corporate pushback is too strong, but maybe not.

Don't use things you don't trust. If you trust Apple's proprietary software at least you are getting exactly what you signed up for. Apple gets to do whatever they want, which you apparently trust them to do. Will they accidentally let in bad guys? Maybe. You signed up for that too.

[ Parent | on HN ]

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by comboy on Wednesday October 21, 2020 @03:11AM (#24845438)

When we are talking about malware that's irrelevant. And if we are talking about inspecting Apple's traffic, I don't think you should trust things you see on their hardware running their operating system.

[ Parent | on HN ]