Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Supposedly, there is a way. You can just remove all the apps from the whitelist. After that apps like Little Snitch pickup on the activity. Hosts file I believe still works as well but I haven't seen anyone who's tried it out yet and posted about it. One caveat is that you probably have to monitor the whitelist to make sure nothing gets added to/back without you knowing about it.

Not sure how well any of that works though. I'm not touching Big Sur or the new macs with a 10' pole until all the software that I rely on is updated to not require kexts 100% (including Little Snitch full support) and Apple silicon has virtualization support so I can run Docker.

I'm really glad I just upgraded to the latest intel mbp a few months ago.



Yes according to this [1] there is a way to remove the whitelist entries. It doesn‘t seem practical and it‘s a big turn off for me. I was thinking about switching to an ARM Mac when the second or third generation comes out, depending on how they perform. But now I‘m thinking I probably won‘t switch. Especially with things like this and how stuff like this is enforced on other platforms.

How can I know that the option to edit the whitelist won‘t be removed as fast as the default entries were added to the whitelist?

1: https://tinyapps.org/blog/202010210700_whose_computer_is_it....


And requires that you disable system integrity protection, which opens you up to other threats as well as bugs that can prevent you from being able to boot at all:

https://mrmacintosh.com/google-chrome-keystone-is-modifying-...


Oh, thanks.

At least there seems to be a way to try and fight it.

What a mess, man...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: