← Back to context

Comment by parable

5 hours ago

Is it possible to block Apple Intelligence from sending data over the Internet via Little Snitch? I would assume it is, but I'm not sure if anything significant has changed in macOS 27 that makes this impossible now. I don't really mind the local features - I'd rather they stay disabled, but it's not the end of the world - but I really don't want any data leaving my Mac.

13 comments

parable

Reply
reaperducer  4 hours ago

Is it possible to block Apple Intelligence from sending data over the Internet via Little Snitch?

Short answer: Maybe, but I've never tried it.

Little Snitch is aware of various system-level network connections, but I don't know if they're granular enough to block the AI only.

ActorNightly  5 hours ago

Apple OS will bypass any user space firewall.

You can verify this yourself. Get an old laptop to act as a wifi hotspot and forward traffic over usb ethernet adapter to your actual router. Then run tcpdump on the computer. You will see the multitude of phone-home traffic.

  • throwaway27448  4 hours ago

    Is there evidence of this anywhere on the internet? I couldn't find anything with ten minutes of searching, and I don't use little snitch, and I'm not going to put the effort in to remediate this just to figure out if this comment has weight.

    • agsnu  4 hours ago

      Probably referring to https://www.obdev.at/blog/a-hole-in-the-wall - as of 2020

      > As it turned out, this behavior is on purpose. There’s an explicit whitelist that allows certain macOS services to bypass any third party firewalls and to communicate on the Internet without being even noticed by the user. A hole in the wall.

      Was remediated later, but shows there is precedent.

      1 reply →

  • wartywhoa23  4 hours ago

    Well, I block all connections to iCloud for every app (user and system) completely with Little Snitch, and the fact that it does indeed break some little features I can absolutely live without, indicates that it has at least some effect.

    But still, I fully share the sentiment that creators of an OS are perfectly capable of bypassing whatever there is running on top of it.