Post

Replies

Boosts

Views

Activity

Reply to How many instances of the same NEFilterDataProvider can there be in a running NE?
I don't have logs, only a memgraph, so I can't say whether there were 2 starts logged. The 2 instances are referenced by a collection object (owned by a different class instance). The data filter instance adds itself to the collection from the startFilterWithCompletionHandler: method and removed itself from the collection from the stopFilterWithReason: method. So the most probable hypothesis is that the stopFilterWithReason: was not called. Which would be more a bug in the NetworkExtension framework. I haven't been able to reproduce this case so far (like by disabling/enabling the Network filter from the System Settings).
Jul ’25
Reply to Error when updating system extension
I don't think the problem is coming from the macOS instance itself as the problem does not occur when the extension is updated using an installation package. The problem only happens when replacing the system extension and its wrapper .app using basic NSFileManager APIs. I diffed the 2 cases and there are no differences. Same files, same contents. And anyway spctl and codesign are happy. I tried different macOS versions in VMs (14, 15). Same result. What I'm also observing is that after updating the system extension using an installation package, just using the NSFileManager APIs is going to work fine when reverting to any version that has been previous installed via an installation package or updating to version that has been previously updated via an installation package.
Topic: Code Signing SubTopic: Notarization Tags:
Dec ’25
Reply to Error when updating system extension
This issue is related to notarization assessment not being automatically done by the OS. [Q] Are there public APIs to assess notarization? There are private APIs (visible in the security open source code of the security library) but there does not seem to be public APIs.
Topic: Code Signing SubTopic: Notarization Tags:
Feb ’26
Reply to How many instances of the same NEFilterDataProvider can there be in a running NE?
I don't have logs, only a memgraph, so I can't say whether there were 2 starts logged. The 2 instances are referenced by a collection object (owned by a different class instance). The data filter instance adds itself to the collection from the startFilterWithCompletionHandler: method and removed itself from the collection from the stopFilterWithReason: method. So the most probable hypothesis is that the stopFilterWithReason: was not called. Which would be more a bug in the NetworkExtension framework. I haven't been able to reproduce this case so far (like by disabling/enabling the Network filter from the System Settings).
Replies
Boosts
Views
Activity
Jul ’25
Reply to How many instances of the same NEFilterDataProvider can there be in a running NE?
Feedback ID: 18731867
Replies
Boosts
Views
Activity
Jul ’25
Reply to Incoming UDP Traffic in macOS 15.3 and later?
It can be reproduced in macOS 26 beta 1 and beta 2.
Replies
Boosts
Views
Activity
Jul ’25
Reply to Incoming UDP Traffic in macOS 15.3 and later?
It looks like that the issue is not reproducible in the 15.6 RC.
Replies
Boosts
Views
Activity
Jul ’25
Reply to Error when updating system extension
I don't think the problem is coming from the macOS instance itself as the problem does not occur when the extension is updated using an installation package. The problem only happens when replacing the system extension and its wrapper .app using basic NSFileManager APIs. I diffed the 2 cases and there are no differences. Same files, same contents. And anyway spctl and codesign are happy. I tried different macOS versions in VMs (14, 15). Same result. What I'm also observing is that after updating the system extension using an installation package, just using the NSFileManager APIs is going to work fine when reverting to any version that has been previous installed via an installation package or updating to version that has been previously updated via an installation package.
Topic: Code Signing SubTopic: Notarization Tags:
Replies
Boosts
Views
Activity
Dec ’25
Reply to Error when updating system extension
This issue is related to notarization assessment not being automatically done by the OS. [Q] Are there public APIs to assess notarization? There are private APIs (visible in the security open source code of the security library) but there does not seem to be public APIs.
Topic: Code Signing SubTopic: Notarization Tags:
Replies
Boosts
Views
Activity
Feb ’26
Reply to Error when updating system extension
API != command line tool. Not a fan of using command line tools either. I have already a radar/feedback assistant ticket about this issue: 21381323
Topic: Code Signing SubTopic: Notarization Tags:
Replies
Boosts
Views
Activity
Feb ’26
Reply to When is the kTCCServiceEndpointSecurityClient permission set by macOS?
Thanks. I will file multiple feedback assistant tickets as getting documentations and fixing the issues seem to be 2 different topics.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Feb ’26
Reply to Are there workarounds for these bugs in Xcode?
OK, I will file tickets. At least the IBAction one is still happening in Xcode 26.2.
Replies
Boosts
Views
Activity
Feb ’26