Apple removes first-party firewall exemption in macOS 11.2 beta 2

Re:Apple removes first-party firewall exemption in macOS 11.... by mvanbaak on Thursday January 14, 2021 @07:04AM (#25775395)

Both are 'physical access'.

If one does not power down your system, your FDE is unlocked. So they only need your Linux user account password to get access to the data on your disk.

FDE only protects your data when it's locked. Normally this is when your system is shut down.

[ Parent | on HN ]

Re:Apple removes first-party firewall exemption in macOS 11.... by ddtaylor on Thursday January 14, 2021 @11:35AM (#25778405)

The main difference is in the attack surface. Attacking the FDE can happen offline with infinite attempts with a large-scale operation dedicating lots of compute power. Breaking my user password has to happen on site at that exact moment and my lock screen can detect N number of failed logins and shutdown.

[ Parent | on HN ]

Re:Apple removes first-party firewall exemption in macOS 11.... by GekkePrutser on Thursday January 14, 2021 @07:57AM (#25775782)

True but it's a slightly different category as he wouldn't leave his system on but locked in a potential high risk scenario.

[ Parent | on HN ]

Re:Apple removes first-party firewall exemption in macOS 11.... by jiofih on Thursday January 14, 2021 @09:21AM (#25776530)

You mean he would shut down a MacBook every day after us? That’s blasphemy.

[ Parent | on HN ]

Re:Apple removes first-party firewall exemption in macOS 11.... by fpoling on Thursday January 14, 2021 @01:37PM (#25780259)

At least with 10.15 and earlier you can configure MacOS to hybernate after certain amount of time when it will ask for FDE password on wake up and load everything from the disk.

[ Parent | on HN ]

Re:Apple removes first-party firewall exemption in macOS 11.... by KraftKacke on Thursday January 14, 2021 @07:45AM (#25775701)

Separation is still recommended.

Storage encryption can be attacked differently than a running system.

[ Parent | on HN ]