Why Hacker News recommends it
5 comments from 3 distinct recommending readers, between 2020 and 2024.
- Recommends
One thing I learned from using Little Snitch is that a lot of Apple apps are seemingly immune from these types of firewalls, due to Apple shenanigans around k-ext signing etc [0]. Ref also [1]: > In Big Sur Apple decided to exempt many of its apps from being routed thru the frameworks they now require 3rd-party firewalls to use (LuLu, Little Snitch, etc.) > Q: Could this be (ab)used by malware to also bypass such firewalls? > A: Apparently yes, and trivially so [0] x.com/patrickwardle/status/131843792949… [1] x.com/patrickwardle/status/132772649620…
Updating from macOS Ventura to Sonoma Silently Enables iCloud KeychainRead the thread - Recommends
It still works only for legitimate apps. Any malware will use this loophole to bypass firewalls twitter.com/patrickwardle/status/132772…
Apple apps on Big Sur bypass some firewalls and VPNsRead the thread - Recommends
No, I’m talking about regular Apple apps that bypass local software firewalls. See this HN thread from ~2 months ago for an introduction: news.ycombinator.com/item?id=24838816 This is new behaviour to Big Sur, breaking existing tooling and providing a back door for Apple, and anyone who can exploit it like this guy twitter.com/patrickwardle/status/132772…
The Ampere Altra Review: 2x 80 Cores Arm Server Performance MonsterRead the thread - Cites it
Use Little Snitch, it does it's job really well. Though, keep this in mind: > In Big Sur Apple decided to exempt many of its apps from being routed thru the frameworks they now require 3rd-party firewalls to use (LuLu, Little Snitch, etc.) Face with monocle > Q: Could this be (ab)used by malware to also bypass such firewalls? Thinking face > A: Apparently yes, and trivially so Grimacing faceFace screaming in fearLoudly crying face twitter.com/patrickwardle/status/132772…
Ask HN: What is the best firewall software for Mac? - Cites it
They comment on the OCSP issue but fail to comment on the Apple application exemption from filtering in Big Sur? twitter.com/patrickwardle/status/132772…
Apple Responds to macOS Privacy Concerns, Explains Why Apps Were Slow to LaunchRead the thread