Privacy Concern with mDNS Broadcast during Lockdown Mode on MacBook
I am writing to report a significant privacy and security concern I've encountered while using my MacBook in Lockdown Mode. I have discovered that the Multicast DNS (mDNS) service continues to broadcast even when the system is in Lockdown Mode. This is concerning because mDNS makes public a variety of information that should remain private, especially in a mode designed for heightened security.
In particular, mDNS broadcasting in Lockdown Mode reveals the following details:
- The names of services running on my computer
- My device's hostname
- Open ports which could potentially be probed for vulnerabilities
Lockdown Mode is expected to provide an extreme level of security for users who might be at risk from sophisticated cyber threats. However, the fact that mDNS continues to transmit such sensitive information in this mode is counterintuitive to the purpose of Lockdown Mode. It potentially exposes users to network-based identification and system probing that they opted out of by choosing to operate in this highly secure environment.
I understand the necessity of mDNS in the seamless operation and integration of Apple services under normal operating conditions. However, broadcasting these details when in Lockdown Mode undermines the privacy guarantees that users, particularly those facing severe digital threats, expect from this feature.
Could you please clarify if this is intended behavior for Lockdown Mode, and advise on how to prevent mDNS broadcasting when privacy is of utmost concern? If this is not the intended behavior, it should be treated as a security flaw that requires immediate attention to protect the privacy of users depending on Lockdown Mode for their safety.
I am looking forward to your urgent response and assistance on this matter to ensure that user privacy is not inadvertently compromised.
Thank you for your attention and support.
MacBook Pro 13″, macOS 14.1