On: WireGuard: Great protocol, but skip the Mac app

[sneak]

> It is true that for updating WG you need to first disable the on-demand setting (probably only on Big Sur).

Which means shutting down the VPN, and exposing your hardware serial (the MAS app transmits this to Apple, along with your Apple ID) and true IP (which is equivalent to your city-level location) to Apple.

Not a great state of affairs.

[cpach → sneak]

If one does not want the serial transmitted to Apple, a better solution is probably to switch to another OS.

I honestly see no problem with Apple knowing the IP address. It’s the same with Windows 10, since it will check for Windows updates frequently.

If you see these things as a problem it’s probably best to use Qubes OS instead.

[sneak → cpach]

Transmitting your hardware serial to Apple along with your direct IP permits Apple and anyone with access to Apple's databases/logs a record of your travel history, because IPs are city-level geolocation.

Macs and iPhones also maintain a persistent connection to the Apple push notification service with a TLS client certificate obtained via registering with the hardware serial.

Just because you personally are okay with Apple and, by extension, the US military having your travel history doesn't mean that there's no problem with it.