Little Snitch

Um, and, and certainly Apple could do a lot to make a much better system that would, you know, they could do auditing.

And the other thing is, yeah, if you do give full disk access, then you have no, um, you, you know, like you can't do something like Little Snitch where you can see what, you know, what's something doing on the network.

Uh, and one of the deve- there's a developer that even says he wanted to make an app that would to do a Little Snitch, Snitch side of thing and show what, you know, well, what, what is this app, uh, app, uh, doing with full disk access, and he wasn't able to get the entitlements he needed from Apple, so he couldn't do it.

Um-

Eric

And I used to dig into this a lot, and invariably it came out that it was a bug in Apple's low-level network extension framework.

And now it's great because the users on GitHub who kind of are now proponents of this tool will test them with other network extensions, other third-party products, and they'll be like, "Oh, well, Little Snitch is also impacted," or, "Cisco's network DNS stuff is also impacted." And so this clearly is an Apple bug.

[laughs] And so they've made progress.

In 27, it's a little bit more robust, but still for something like a firewall that's really just pretty binary, like should I allow this connection or not, network extension and that very complicated framework is definitely overkill.