macOS Sequoia, beta test, and endpoint security

What’s the issue?

The problem was highlighted by researcher Will Dormann who pointed out that firewall and DNS-related issues were to blame. He clarified that utilizing Sequoia’s in-built firewall to obstruct incoming connections may inadvertently block responses to DNS queries.

The puzzling aspect lies in the fact that security firms seemingly overlooked these concerns during the beta testing phase, or if they did, neglected to caution users about potential complications. It seems highly improbable that Apple would introduce further modifications to the OS following the rollout of the final RC (Release Candidate) during beta testing.

In light of this, one would expect developers to have already rigorously assessed their products and recognized any probable issues. The fact that some have already upgraded their software to align with Sequoia indicates the feasibility of this scenario. If this is indeed the case, then why did other security developers fail to keep up? (As per The Register’s report, Apple was reportedly made aware of the issues but no solution was forthcoming.)

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts