Hacker News Reader

You can disable SIP and even disable immutable kernel text, load arbitrary drivers, enable/disable any feature, remove any system daemon, use any restricted entitlements. The entire security model of macOS can be toggled off (csrutil from recoveryOS).

View on HN

Aware of that. Way too big of a request just to make reasonable configuration changes, like shutting down daemons, etc.

No, it’s not that big a request. You literally have the capability. The average user does not need it.

What is hard about this?

Stopping/disabling a service should be a command, like it is on Windows or Linux. Not configured on a read-only volume bundled with other security guarantees.

It's pretty simple to keep these two things separate, like everywhere else in the present and history of the industry.

Just because Windows/Linux do things one way doesn't mean the rest of the industry has to follow it. ;P

Reply on news.ycombinator.com