Sounds related. So now we must summon the combined power of HN to find the simplest way to hobble this behavior on Mac and Windows without entirely breaking the OS itself and that our overlords would find entertaining.
back
3 comments
Siri can be disabled on iOS and MacOS by Apple Configurator MDM, which generates an XML policy file that can also be generated by any text editor or shell script.
> So now we must summon the combined power of HN to find the simplest way to hobble this behavior on Mac and Windows without entirely breaking the OS itself
Hopefully the combined power of HN can figure out how to not enable this opt-in feature.
Hopefully the combined power of HN can figure out how to not enable this opt-in feature.
Feature toggles like this can be enabled on a single OS update, a single dial-home to the mother-ship. If the code is there I assume it is running. The only winning move is not to play.
So ... a bit off topic, but I want the opposite from OS vendors. The OS installation should take at most 3 minutes. Any features or geese that lay golden eggs that I desire should be a checkbox in a list of optional services. If I do not select anything the OS should not be bigger than 3GB for a desktop or 1GB for a server and even that is quite a bit bloated. If code is discovered on a machine that the administrator or owner did not intentionally install that needs to be treated as a security incident meaning "all hands on deck" and "all lawyers on a conference call with the OS vendor".
As a bit of a tangent, done right I should be able to click a button in Ansible and completely re-install the OS to a fleet of 100K bare metal servers in less than 10 minutes across 4 data-centers per region not counting POST time. Once the database OS is up their tamper-proof backups automatically restore, app servers grab their code and in 30 minutes every data-center is up and running. The first people in should be the customers and they might ask if we had a network blip.
That comment was for CISA. Make the above step 1 in chaos monkey tests for all corporations and governments and make live testing required by law to be publicly traded. This testing must be performed annually in a staging environment in every data-center to remain listed on the stock market or remain funded in government budgets. If code exists on a machine that need not be there it's a security incident. Let's not have another Sony/Tri-Star.
> If the code is there I assume it is running.
This is such a bizarre and dishonest mindset.
Windows also has code to allow automatic login without a password. Do you assume because the feature exists, it’s going to be enabled after an OS update?
What about the code to enable remote access for support purposes? That exists for a while, but people aren’t freaking out about it existing.
I am sure people disagree with me and agree with you. Fact is if I bundled up the latest version of Windows, Mac, BSD, Linux malware and ransomeware most here would be hesitant to copy it to their workstations, dev/qd, staging and production servers even if they did not wish to execute it. Very few would be able to prove it was never executed much less be able to prove what the code did or did not do.
If it's not needed it's gotta go especially if it can talk to the network or modify data/code that can talk to the network. I will always assume it is or was running, period full stop.
I'm pretty sure the combined power of HN can figure out how to put an Ubuntu installer on a thumb drive and reboot.