Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by intricatedetail | Hacker News Reader

Parent Full thread

intricatedetail·

Learn about Big Sur(veillance). You can't block telemetry and it bypasses any VPN.

View on HN

I've learnt about it. I've also commented about it in other threads here.

Well, you can block it. You need disable SIP and edit a plist.

Quick question on that. Has anyone tried disabling SIPs (csrutil disable), allowing the Little Snitch kext (spctl kext-consent add MLZF7K7B5R) and just using Little Snitch 4.6 in Big Sur?

And then you need to do it again for every update you receive and create a new signature etc.

I guess we’ll have to see if the file gets reverted in updates. I don’t think that’s a given?

I too am not happy about the root snapshot thing...

That doesn't matter. The total signature is still different from factory default, so if any change is made to any other file it will be different and need to be updated :)

What's being signed is a hash of all the individual file hashes, so any file being different from stock will mean a difference, whether it was changed in the latest update or not.

I didn't realize that still mattered once you'd disabled authenticated root...

Not really the question I asked. Also keep in mind that when you disabled SIPs in 10.15, none of the, at least minor, upgrades, reverted the change.

GP didn’t reply to your comment, they replied to mine. :)

Seems to work fine here, nothing bypasses my VPN nor does it bypass my firewall. Perhaps that's because my VPN and my firewall aren't running inside the computer but external to it, as it should.

The direction we are going is built in cell comms for all devices, good luck firewalling that.

tin foil -- not just for hats anymore

Reply on news.ycombinator.com