HN user

hello_asdf

199 karma
Posts2
Comments98
View on HN

There's a few solutions:

LittleSnitch 4 can continue to work (with the kext) on Big Sur following this: [1]

LittleSnitch 5 can block all protected MacOS processes by following this: [2]

Murus can use PF and block IPs for Apple services: [3]. This isn't per process, and is really just a UI for the built-in PF process.

If you'd like to block the notarization check, you can block trustd (/usr/libexec/trustd) access to ocsp.apple.com (on both system and user process ownership in LittleSnitch).

Hope this helps. It's really not as bad as you think, there's a few solutions depending how thoroughly you want to block things.

[1] https://www.obdev.at/support/littlesnitch/245913651253917

[2] https://tinyapps.org/blog/202010210700_whose_computer_is_it....

[3] https://www.murusfirewall.com

macOS Big Sur 6 years ago

I believe you can still block the specific destination IPs with pf using murus if you want, but yes it's quite bothersome.

You can find the full list of apps that bypass it here: /System/Library/Frameworks/NetworkExtension.framework/Versions/A/Resources/Info.plist under ContentFilterExclusionList.

I disagree with the author. A coding challenge is a good way to judge how a candidate approaches a problem. The ability to walk through what you’re thinking while you’re doing it is a great judge of ability.

It also helps to weed out people who can’t actually program, this comes up annoyingly often.

I agree that having intentional errors in a starter repository is bad though.

People have to eat, and it's an available way to make money. In other African countries (at least in the East which I'm more familiar with) the government has been trying to combat the charcoal trade. The government in Nigeria has less of a presence though, so it's probably been difficult and not a top priority.

This is all speculation though.