Apple’s Big Sur has a huge security hole

Stefan Mileschin · 24th November 2020, 16:55

Ignored all warnings

Security researchers are blasting Apple for a feature in the latest Big Sur release of macOS that allows some Apple apps to bypass content filters and VPNs.

The problem had been spotted ages ago when Big Sur was in the beta testing phase. Apple was expected to fix the flaw before the OS was released. For some reason, Apple didn’t.

Beginning with macOS Catalina released last year, Apple added a list of 50 Apple-specific apps and processes that were to be exempted from firewalls like Little Snitch and Lulu.

The undocumented exemption, which didn’t take effect until firewalls were rewritten to implement changes in Big Sur, first came to light in October.

https://fudzilla.com/news/mobile/519...-security-hole

24th November 2020, 16:55	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,802	Apple’s Big Sur has a huge security hole Ignored all warnings Security researchers are blasting Apple for a feature in the latest Big Sur release of macOS that allows some Apple apps to bypass content filters and VPNs. The problem had been spotted ages ago when Big Sur was in the beta testing phase. Apple was expected to fix the flaw before the OS was released. For some reason, Apple didn’t. Beginning with macOS Catalina released last year, Apple added a list of 50 Apple-specific apps and processes that were to be exempted from firewalls like Little Snitch and Lulu. The undocumented exemption, which didn’t take effect until firewalls were rewritten to implement changes in Big Sur, first came to light in October. https://fudzilla.com/news/mobile/519...-security-hole

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Apple has a hole in its Device Enrolment Programme security	Stefan Mileschin	WebNews	0	28th September 2018 09:01
Windows 10 included password manager with huge security hole	Stefan Mileschin	WebNews	0	17th December 2017 17:32
AVG's Chrome security add-on had a big security hole	Stefan Mileschin	WebNews	0	31st December 2015 06:32
Firefox has a new security hole, but you can already patch it	Stefan Mileschin	WebNews	0	8th August 2015 15:21
How could Lenovo miss its Superfish security hole?	Stefan Mileschin	WebNews	0	22nd February 2015 14:47
Data Siphoned Through Huge Internet Security Hole	Stefan Mileschin	WebNews	0	6th December 2013 08:13
Bluebox reveals Android security hole	Stefan Mileschin	WebNews	0	4th July 2013 08:06
Apple releases iOS 6.1.3 to patch lock screen security hole	Stefan Mileschin	WebNews	0	20th March 2013 10:17
Huge Hole in Open Source Software Found, Leaves Millions Vulnerable	jmke	WebNews	1	23rd May 2008 22:40
Huge Security Hole Found in Symantec Antivirus Software	jmke	WebNews	0	27th May 2006 14:42