big sur causes little snitch to fail


So I went slumming on Slashdot (yeah, I know), and came across the ravings of a paranoid Apple user with a blog post titled “Your Computer Isn’t Yours” ( https://sneak.berlin/20201112/your-computer-isnt-yours/ ) laying out all sorts of evil and nasty things happening on you Mac with macOS Big Sur and OCSP and how this is what the great Internet gods Stallman and Doctorow foretold would happen many, many years ago.

Bullshit.

In spite of my knowing better than to trust this, I let the paranoia in me run wild a bit and went off to Objective Development to download my very own 30-day try-it-out copy of Little Snitch (which is what this is actually all about and why I have their propellor beanie on the page) ( https://www.obdev.at/products/littlesnitch/index.html ). So how did that work out for you, Bill?

I’m glad you asked.

It didn’t work out well at all. After installing version 5.0.2, the anointed version for Big Sur, I would click on it and it would just sit and bounce in the dock for some indeterminate time, then stop bouncing. But nothing showed up anywhere on the desktop, not a window, nothing anywhere. I tried this twice (because I couldn’t believe it the first time). Both times I’d have to kill the instance in the dock. After the second time I just deleted it.

It wouldn’t be so bad if I hadn’t read in the first link about how Apple’s Mac applications just bypass network framework and go directly out to the internet. Which means if it did start up I don’t believe it would do any good if Little Snitch did properly start.

And while poking around Daring Fireball (the site I swore I’d never visit again), I came across a link to another post by a different author titled “Does Apple really log every app you run? A technical look” ( https://blog.jacopo.io/en/post/apple-ocsp/ ). This is a sane and clear explanation of what is actually happening, not the heated rantings coming from “Your Computer Isn’t Yours”. At the very end of the article there’s a three bullet list. The last bullet says “You shouldn’t probably block ocsp.apple.com with Little Snitch or in your hosts file.” Which is what the author of “Your Computer Isn’t Yours” at least implies that’s something you might want to do. I guess it was a good thing Little Snitch refused to start on my MacBook Pro after all.

moving on to big sur, this released but not yet supported version

No, I don’t know why there’s a big black dot in the upper right.

Yeah. In spite of all the dread warnings I went on ahead and updated to Big Sur, macOS 11.0.1. So far, nothing is horribly broken. There are, however, the humorous touches one finds in certain applications. Consider, for example, what Brew says when I go to run brew update:

Wow, I get to create pull requests against brew! Who’d of thunk it! Of course, I believe I use only a small subset of tools that are pretty generic when it comes to how they’ll build. I would imagine that there are some formulae (i.e. applications) that have a hard-coded macOS build environment. Or perhaps dependent upon a feature or two that is now more locked down in macOS 11. So far my upgrades haven’t failed. The only other failure is that macOS is now flagging an extension of HP’s Printer tools as dangerous. I personally consider HP software dangerous on general principals, but this is the first time Apple has pointed explicitly at HP.

Internally everything seems to be fine, and I don’t notice any performance issues. I am not too crazy about the iconography, however. macOS has been drifting from the flat UI theme to something more skeuomorphic. I’m not especially impressed. And I now have a bright outline to the Dock that just looks like ass.