News for hackers. Stuff that matters.

A comment on macOS Sequoia 15 may bypass DNS encryption.

Re:macOS Sequoia 15 may bypass DNS encryption by xyst on Tuesday September 17, 2024 @04:06PM (#41572099)
If I recall, Apple deprecated use of certain network apis for third party developers. But Apple’s own apps (App Store) do not have these same restrictions. Thus, when trying to filter network traffic via app firewall via new APIs. It would fail since App Store uses legacy APIs.

Maybe part of this old bug (that I thought was fixed)

[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by newaccount74 on Tuesday September 17, 2024 @04:51PM (#41572590)
getaddrinfo() is not a legacy API, it's a standard cross platform API for doing DNS lookups.
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by indrora on Tuesday September 17, 2024 @05:27PM (#41572983)
Specifically defined by POSIX: https://pubs.opengroup.org/onlinepubs/9699919799/functions/g...
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by keyboardcaper on Tuesday September 17, 2024 @05:38PM (#41573120)
Funny how that goes: macOS is POSIX certified but no other desktop BSD or Linux is.
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by spookie on Tuesday September 17, 2024 @07:08PM (#41573853)
Because it's an expensive and lengthy process. And every version would need to be re-certified.
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by ajross on Tuesday September 17, 2024 @08:30PM (#41574387)
There have been POSIX-certified Linux variants. But the open source projects you use don't bother (for obvious reasons) and commercial derivatives like Android and ChromeOS don't need it. Similarly Window NT was POSIX-certified way back in the day yet its descendants aren't, even though they implement the same API set (via very different technology).
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by vbezhenar on Wednesday September 18, 2024 @06:43AM (#41578054)
According to https://www.opengroup.org/openbrand/register/ macOS 15 is not certified.
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by trillic on Tuesday September 17, 2024 @05:31PM (#41573026)
It's POSIX which Apple generally abides by except for timer_create. macOS is historically officially a UNIX, which would require getaddrinfo.
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by nox101 on Tuesday September 17, 2024 @05:47PM (#41573203)
it is apparently on Mac and arguably with good reason. See this comment https://news.ycombinator.com/item?id=41572770
[ Parent | on HN ]