macOS BigSur

[Guest]

As of current retail/production build of macOS bigSur 11.0.1:

bypass apples builtin (iptables? i presume), third party Lulu, third party paid like Little Snitch, Handsoff, pirated apps included.

Date, Time, Computer, ISP, City, State, Application Hash

https://developer.apple.com/documentation/networkextension/nefilterdataprovider
https://developer.apple.com/support/kernel-extensions/

https://sneak.berlin/20201112/your-computer-isnt-yours/
https://www.reuters.com/article/us-apple-fbi-icloud-exclusive/exclusive-apple-dropped-plan-for-encrypting-backups-after-fbi-complained-sources-idUSKBN1ZK1CT
https://lapcatsoftware.com/articles/ocsp.html

Apples followup: https://support.apple.com/en-us/HT202491

1. deleting the IP logs <== 😉 sure thing

2. encrypting the communication between macOS and Apple to prevent the privacy leak <== LMAO dafuq

3. giving users an option of disabling these online checks that leak what apps you’re opening and when. <== blocking api.smoot.apple.com in hosts??
   

Thoughts? I assume this effects all services, like AirVpn [NO, WRONG ASSUMPTION - Staff}, Nord, ProtonVPN etc.

[Staff 9751]

Hello!

Of course, the problem has nothing to do with Eddie Network Lock.

Eddie and Hummingbird enforce Network Lock thorugh pf rules. The mentioned problem is that kernel extensions are deprecated, and the new API NetworkExtensions includes exceptions to filtering rules which allow 56 Apple apps and services to bypass any filtering rule enforced via the API. That's quite atrocious and says a lot about Apple's respect toward its customers, but that's how it is. However, pf is the system firewall which is autonomous from NetworkExtensions API and its exceptions. Therefore Eddie and Hummingbird Network Lock are working fine just as usual.

Note that the NetworkExtensions exceptions were active even in Catalina. However, nobody noticed them because third-party firewalls bypassed them by relying on kernel extensions (kexts). Now that kexts don't work anymore, the problem has exploded, but as usual you are safe with AirVPN Network Lock both in Eddie and Hummingbird.

Kind regards