fantomas 4,139 Posted November 19, 2020 Share Posted November 19, 2020 In Big Sur Apple decided to exempt many of its apps from being routed thru the frameworks they now require 3rd-party firewalls to use (LuLu, Little Snitch, etc.) Q: Could this be (ab)used by malware to also bypass such firewalls? A: Apparently yes, and trivially so. twitter View full article 8 1 Link to post Share on other sites
eSaF 1,658 Posted November 19, 2020 Share Posted November 19, 2020 This is getting to be seriously concerning, first we read about BS collecting personal data of it's users and possible spying, now this. BS is turning out to be a Big Surprise. 2 1 Link to post Share on other sites
5T33Z0 279 Posted November 19, 2020 Share Posted November 19, 2020 Here's a bit more technical insight on the issue: https://sneak.berlin/20201112/your-computer-isnt-yours/ 2 1 Link to post Share on other sites
eSaF 1,658 Posted November 19, 2020 Share Posted November 19, 2020 1 hour ago, 5T33Z0 said: Here's a bit more technical insight on the issue: In the words of Spock - 'Fascinating' 2 Link to post Share on other sites
Hervé 2,365 Posted November 19, 2020 Share Posted November 19, 2020 In the words of Jean-Luc Picard - "Meeerde !" 4 Link to post Share on other sites
eSaF 1,658 Posted November 19, 2020 Share Posted November 19, 2020 @Hervé - Oh darn it man now you've put me in the mood to go and watch some reruns of 'Next Generation'. 2 Link to post Share on other sites
HenryV 107 Posted November 19, 2020 Share Posted November 19, 2020 People who want to know what apps and processes are exempt can open the macOS terminal and enter sudo defaults read /System/Library/Frameworks/NetworkExtension.framework/Resources/Info.plist ContentFilterExclusionList. 1 2 Link to post Share on other sites
Muaitai 0 Posted November 28, 2020 Share Posted November 28, 2020 Apple is addressing this issue in the article below: https://support.apple.com/en-us/HT211931 Link to post Share on other sites
azul líder 1 Posted December 26, 2020 Share Posted December 26, 2020 I'm pretty sure that's actually about a separate, stupid issue. Link to post Share on other sites
Recommended Posts