←back to thread

MacOS sometimes leaks traffic after system updates

(mullvad.net)
400 points dulvui | 1 comments | 16 Oct 24 08:37 UTC | HN request time: 0.462s | source
Show context
thisislife2 ◴[16 Oct 24 11:58 UTC] No.41858057[source]▶
> In this scenario the macOS firewall does not seem to function correctly and is disregarding firewall rules ... Some examples of apps that do this are Apple’s own apps and services since macOS 14.6, up until a recent 15.1 beta.

This is not new - every time I update macOS, some of the system settings are changed to default including some in the firewall. And I have to painstakingly go through all of it and change it. Also, the few times I've reinstalled or updated macOS, I've always noticed that it takes longer for the installation if your system has access to the internet - so now I've made it a practice to switch of the router while installing or updating macOS or ios. (With all the AI bullshit being integrated everywhere in Windows, macOS and Android etc., I expect this kind of "offloading" of personal data, and downloading of data, to / from AI servers to keep increasing, especially during updates, to "prepare" for the new AI features in the newer OS updates. No internet means the installer is forced to skip it for later, saving you some valuable time, and hopefully you get to change the default setting before it starts up again. Whatever the claims of AI processing done on the Mac or iDevices itself, some "offloading" to their servers, will still happen, especially if the default settings - which you can change only after the OS is installed - also enables analytics and data collection.)

(More here https://news.ycombinator.com/item?id=26418809 and on this thread - https://news.ycombinator.com/item?id=26303946 ).

replies(5): >>41858347 #>>41858667 #>>41858894 #>>41859069 #>>41860418 #
hypeatei ◴[16 Oct 24 12:34 UTC] No.41858347[source]▶
> I've made it a practice to switch of the router while installing or updating macOS or ios.

Why are you still using those OSes? That seems like a lot of work for something you paid for.

replies(7): >>41858740 #>>41858753 #>>41858910 #>>41859079 #>>41859370 #>>41859454 #>>41859860 #
vundercind ◴[16 Oct 24 13:56 UTC] No.41859079[source]▶
Because all operating systems are terrible but the rest are so incredibly bad that Apple’s are still by far the best, once you add up time saved by features and capabilities and subtract time lost to pain-in-the-ass brokenness.

(Two decades on DOS/Windows home series and NT, at least for gaming and sometimes work, twelve years with Linux as my main desktop OS, started on Android for smartphones, before finally giving Apple a fair chance around 2011 or 2012… because I was issued a MacBook at work and was doing dual-platform mobile dev—FWIW I was rooting for BeOS back when it was still a thing, it was great)

replies(6): >>41859280 #>>41859646 #>>41860293 #>>41860642 #>>41861873 #>>41863563 #
MichaelZuo ◴[16 Oct 24 14:18 UTC] No.41859280[source]▶
The real question is why is every other company with a consumer OS even more incompetent and/or malicious?
replies(2): >>41859372 #>>41859448 #
fsflover ◴[16 Oct 24 14:29 UTC] No.41859448[source]▶
What's incompetent about Linux? Have you tried to buy preinstalled?
replies(2): >>41859484 #>>41859833 #
MichaelZuo ◴[16 Oct 24 14:32 UTC] No.41859484[source]▶
Have you ever tried to compare something like Ubuntu or RHEL on a per feature per function basis with Mac OS?

There are literally thousands of possible combinations of accessibility features alone, that are vastly more difficult to impossible to access. Or simply don’t exist in any form. Once you add in all the default apps and functions of Mac OS, there’s likely millions of possible combinations that would take a fortune in time and effort and knowledge to replicate maybe a quarter of, on a hypothetical laptop installed with Linux.

Not to mention many peripheral manufacturers for many of their product lines simply don’t officially support any version of Linux released in the past few years.

Edit: Of course 99% of these combinations are irrelevant to any particular individual, but they are all relevant to at least a few small groups.

Linux promoters don’t seem to understand that alienating a few thousand users each time is a big deal if that alienation process happens thousands of times…

replies(1): >>41860012 #
talldayo ◴[16 Oct 24 15:11 UTC] No.41860012[source]▶
> Have you ever tried to compare something like Ubuntu or RHEL on a per feature per function basis with Mac OS?

Yes? Why would people recommend it as an alternative otherwise?

I used MacOS for 5 years, left after Mojave and came back when an employer made me support MacOS. The current software experience on Mac is genuinely insufferable. Advertisements in your news, notifications begging you to try Safari, zero support for common and Open Source filesystems, constantly broken software packaging, zero useful APIs (what am I supposed to do with Metal???) and a $99/year tax to compensate for the displeasure of supporting developers. You really want to argue Apple cares about you?

As a software developer, what pushed me over the edge was Docker. It runs absolutely terrible on MacOS, consumes resources/battery and makes your CPU hot as satan's taint. Native development is a nightmare on MacOS and you just have to settle with that if you want to defend it as your home. Don't even get me started on how bad Brew is.

> Not to mention many peripheral manufacturers for many of their product lines simply don’t officially support any version of Linux released in the past few years.

If your peripheral manufacturer can't support USB class compliance, they do not deserve money in the first place. I produce music on Linux and haven't ever had a MIDI device or DAC fail to register. It's a standard that even Apple isn't "courageous" enough to reject.

replies(3): >>41860569 #>>41861267 #>>41876917 #
1. vundercind ◴[16 Oct 24 15:53 UTC] No.41860569[source]▶
Yeah Docker’s non-native and runs under a virtualized Linux everywhere but… on Linux, so that’s a little rough. I’ve found some of the alternative VM hosts for that to be a ton faster and more power efficient, as they make better use of MacOS’ built-in virtualization system, but YMMV. I’ve also found that Apple’s lead on power management is so great that I can be using a power-sucking thing like Docker and still come out ahead, which is really lame :-/

I hear that “Docker Desktop” is especially bad on MacOS, but I’ve used docker almost as long as it’s existed and still haven’t used that (I don’t really even know what the point of it is?) so dunno about that part.