Hacker News Reader

Comment by solarkraft | Hacker News Reader

systemextensionsctl list yields 0 extensions on my system.

Are there any users of these extensions at this point?

It does seem a bit weird that installing these extensions supposedly doesn't require any user consent, even though stuff like screen recording or folder access does.

View on HN

more common in enterprise environment, but vmware fusion, global protect, and lulu/little snitch come to mind from my experience. Big Sur still technically supports Kernel Extensions, and companies will wait until the last minute before giving in.

I checked my system... I have only a Cisco AnyConnect extension.

I have VMware fusion running (latest version), so maybe they've finished the transition?

VMware Fusion uses the macOS Hypervisor.framework now, so it no longer needs extensions.

I recently ported a light kext to driverkit to enable some custom game controller usage. Wasn’t too bad, and if anything is more documented than kexts ever were (for the stuff I needed, at least).

Little Snitch:

    % systemextensionsctl list 
    1 extension(s)
    --- com.apple.system_extension.network_extension
    enabled active teamID bundleID (version) name [state]
    * * MLZF7K7B5R at.obdev.littlesnitch.networkextension (5.2.2/6209) Little Snitch Network Extension [activated enabled]

TripMode (https://tripmode.ch/) for filtering application Internet access when you're running on mobile data uses a kernel extension.

The latest version of TripMode does not use a Kernel Extension anymore, it uses a Network Extension. Still, user consent is asked by macOS to install it.

Reply on news.ycombinator.com