| ▲ | ProllyInfamous 4 hours ago | |||||||||||||||||||||||||
Just FYI on MacOS's default telemetry: 1) By default, every word (each character, actually) you input into Spotlight/Siri gets time-stamped and sent to `smoot.apple.com` 2) Even with a Pi-Hole blocking *.apple.com (i.e. using MacOS >> Networking >> DNS Server), on boot all modern Apple Silicon reaches out to security.apple.com (i.e. bypassing the user's manual-input DNS setting), using the DHCP-issued DNS IP [0] pro-tip: use your router's DHCP to auto-issue your local Pi-Hole's IP address [as DNS] with your IP-leases; then you'll actually be able to block all *.apple.com traffic (using the PiHole which your DHCP issues to, by default) [0] this is for security chip "lockout" detection (e.g.) and it is pervasive across NICs (i.e. it REALLY seeks any attempt for DNS resolution to security.apple.com) | ||||||||||||||||||||||||||
| ▲ | IndySun 3 hours ago | parent | next [-] | |||||||||||||||||||||||||
>...pro-tip... Thank you for the detailed suggestion. I use LittleSnitch. pi-hole previously, I must take another look. Did you catch LG spying posts? | ||||||||||||||||||||||||||
| ▲ | kvuj 3 hours ago | parent | prev [-] | |||||||||||||||||||||||||
> 1) By default, every word (each character, actually) you input into Spotlight/Siri gets time-stamped and sent to `smoot.apple.com` Huh? How do you expect Apple to show live search results if they don't send what you're typing to their servers? > 2) Even with a Pi-Hole blocking *.apple.com (i.e. using MacOS >> Networking >> DNS Server), on boot all modern Apple Silicon reaches out to security.apple.com (i.e. bypassing the user's manual-input DNS setting), using the DHCP-issued DNS IP [0] From a quick google search, it seems to be if you enable "Find my" or pass word recovery with an Apple account. I think that's reasonable to expect if you enable these features. | ||||||||||||||||||||||||||
| ||||||||||||||||||||||||||