@sp1rit because macos has vastly better security than any other os that runs programs.

linux desktops (i have several here) are super insecure by comparison. it's possible you are ignorant of the security features added to the macOS in the last 5-7 years.

@sneak i haven't used it in the lased 5-7 years so that might be true

Security was never something I cared much about. For me its more free software and privacy - so I think its secure enough just to install firewalld and be done with it. (Probably isnt) 😀

@sp1rit privacy and security are closely related. the apps you use can easily violate your privacy without these new os-level protections and you'd have no idea it happened. there are tools for macOS, both native in the platform, as well as available add-on software, that prevent/surface that, and nothing comparable exists for linux.

@sp1rit for one (of several) example, little snitch/lulu allow you to confirm/deny every outbound connection an app makes, so no invisible calls to data brokers. there's a linux port called opensnitch but i don't know if it still works anymore, is unmaintained in any case.

@sneak
> little snitch/lulu allow you to confirm/deny every outbound connection an app makes, so no invisible calls to data brokers.

That seems cool, how are they doing this? Is apple forcing developers to use one library for http requests, that thoose apps can preload themselves into?

Or do they open a DNS Server and show you every request? (DoT would be an issue tho)

@sp1rit it was a kernel extension before 11.0. 11.0 basically banned kernel extensions/modules (again, security), so apple made an api to let them do it.

it's great... except that apple apps are whitelisted by the OS and bypass it. :(