Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Wow. So digging around in my various Catalina Macs, looking for "deprecated" extensions, I've found the following USB to Ethernet adapters with this issue:

Company/Driver/Example Product:
  • ASIX Electronics/AX88179/J5Create USB-A to Gigabit Ethernet adapter
  • Realtek/RTL815x/StarTech US1GC30B USB-A to Gigabit Ethernet adapter
  • Cypress/CYUSB3610/CalDigit USB-C Dock
My real question.. why do some Ethernet USB adapters not need extensions, or are signed/maintained by Apple? Two examples, the Apple USB-A to 100M Ethernet USB adapter, and the Belkin USB-C to 1G Ethernet adapter model F2CU040 <-- this is sold on Apple.com.


EDIT: Also the Anker A7611 USB-A to 1G Ethernet adapter seems to work, and ironically is the only adapter than I can find that works on iOS devices. So this driver must be supported at the iOS/macOS system level.
 
  • Like
Reactions: makitango
Wow. So digging around in my various Catalina Macs, looking for "deprecated" extensions, I've found the following USB to Ethernet adapters with this issue:

Company/Driver/Example Product:
  • ASIX Electronics/AX88179/J5Create USB-A to Gigabit Ethernet adapter
  • Realtek/RTL815x/StarTech US1GC30B USB-A to Gigabit Ethernet adapter
  • Cypress/CYUSB3610/CalDigit USB-C Dock
My real question.. why do some Ethernet USB adapters not need extensions, or are signed/maintained by Apple? Two examples, the Apple USB-A to 100M Ethernet USB adapter, and the Belkin USB-C to 1G Ethernet adapter model F2CU040 <-- this is sold on Apple.com

Presumably if you use the same chipset as Apple for their USB to ethernet adaptors, then you can use the Apple driver.
If it's a different chipset, then you need to provide a driver than can perform at least certain basic functionality like translating OS initialization/configuration requests into what the chipset requires?
 
What about virtualization software like Parallels and VMware, doesn't that have kernel level components?

Apple introduced a framework for that in macOS 10.10


There's actually a worse situation on Windows since the OS is now using virtualization to protect itself and to run containers. There you're going to either use Hyper-V or do nested virtualization.
 
  • Like
Reactions: DeepIn2U
I see three VMWare extensions on my Mac Pro. All have "Dependencies Satisfied" and are an Identified Developer, Signed by Apple. FWIW. (sorry, not tried to quote comment above about the virtualization kernel requirements)
 
  • Like
Reactions: Basic75
Presumably if you use the same chipset as Apple for their USB to ethernet adaptors, then you can use the Apple driver.
If it's a different chipset, then you need to provide a driver than can perform at least certain basic functionality like translating OS initialization/configuration requests into what the chipset requires?

Makes sense. But I can't determine which chipset/driver these "working" ones use. Possibly Intel 8254x? But that's only because I see that as a verified kext in the extensions list.
 
I got the warning for the Drobo kext after upgrading last night.

Same here. I wonder if there's going to be an update. If they say you have to buy new hardware to make it work on Catalina and later, I'm moving on from them.
 
It's nothing to do with security. It's about total control of the hardware & software experience, like on iOS.

They've been doing it slowly but surely over the last number of years.

I beg to differ ... no third party app should have direct connection to the OS kernel ... that's always been asking for something bad. Kernal panics, ransomware, etc could potentially increase on macOS so I think this is a good move.
 
  • Like
Reactions: fahlman
My real question.. why do some Ethernet USB adapters not need extensions, or are signed/maintained by Apple?
Presumably if you use the same chipset as Apple for their USB to ethernet adaptors, then you can use the Apple driver.

You don't necessarily need the same chipset, Apple supports all three standard USB classes for Ethernet devices (ECM, EEM, NCM). If your device knows how to talk one of these, then no driver is required, similar to the fact that you can plug in USB keyboards without a driver.

These protocols are also used by 3G dongles and older cell phone basebands.

Beyond that, it's not an issue that proprietary devices won't be supported. Apple provides an API specifically for both USB and PCI devices. It's an issue of having the vendors moving to the new API.

 
You don't necessarily need the same chipset, Apple supports all three standard USB classes for Ethernet devices (ECM, EEM, NCM). If your device knows how to talk one of these, then no driver is required, similar to the fact that you can plug in USB keyboards without a driver.

Beyond that, it's not an issue that proprietary devices won't be supported. Apple provides an API specifically for both USB and PCI devices. It's an issue of having the vendors moving to the new API.


Oh that is interesting. I did find the Anker USB-A to Gigabit Ethernet adapter that isn't deprecated uses the Realtek8153 driver, and there is an macOS extension called AppleUSBRealtek8153Patcher, which is Notarized, Loaded and is "Satisfied" Dependancy.
 
That's an excuse, if one is a problem it can be removed. It's just locking down so it become more like IOS and only approved apps from the app store (with Apple taking a cut) can be run. That may be a reasonable goal for Apple but it's spoiling the utility of having a proper UNIX like OS which many bought into it for.

Easy answer is to stick to old OS versions but Apple have that covered with updated apps lacking backwards compatibility so you get forced to update eventually.

This may suit Apple and many users so I doubt they'll change their plan for a few users like me.

Wow ... lots of FUD here.

There was a great app that was a System Extension that showed you system cpu clock speed, fan speed, temperature, ram usage and storage right in in the menu bar with really 'cool' colours IpStat or something like that. It was free to download. Soon enough after being mentioned on the boards here, the developer(s) added new features and a cost to it. I'm sure many OSX users downloaded and installed pirated copies. To the developer that sucked.

So these apps can still be created and grant the features you want - just as one company in the article stated. But securing your fees by a 1st party is no issue.
 
  • Like
Reactions: mulholland13
It's nothing to do with security. It's about total control of the hardware & software experience, like on iOS.

They've been doing it slowly but surely over the last number of years.
False. Kernel Extension operate at Ring-0 and therefore have kernel privileges and all the security problems that can bring, not only with poorly coded extensions, but even the best coded extensions that happen to have a flaw.
[automerge]1585169248[/automerge]
For me, the pop up was complaining about AVAST Security 14.3

Run. Run far far away from Avast products. Besides Malwarebytes the only Anti-virus software I would install on my Macs is Sophos.
[automerge]1585169322[/automerge]
So what's the easiest way to view what Kernel Extensions are in use?

I have a feeling that a bunch of my older software will stop working.

KextViewr by Objective-See.
[automerge]1585169638[/automerge]
Norton Security for Mac has the same issue. Unfortunately, the issue is more pressing for Norton customers. I have several associates at work who have been afflicted with sudden reboots. Apple analyzed the logs and came to the following conclusion:

"It appears that a Symantec kext is causing kernel memory corruption.

So for Norton customers the need for a fix is more urgent.
Norton is terrible. Uninstall it and install Sophos Home.
 
Last edited:
This is going to spawn loads of threads over the next year or two! Considering kexts are part of plenty of modern apps it'll likely be much bigger than Apple deprecating 32-bit apps.

What modern apps? Photoshop? Office? Chrome?
 
Pretty sure my Mac won‘t be magically more protected with Little Snitch gone.
Actually, when Objective Development updates Little Snitch to use the Apple-provided API your computer will be even more secure than it is today with a third-party kext operating in the kernel. Win-win.
[automerge]1585170149[/automerge]
I assume you didn't read that Little Snitch will be updated to support the new system extension requirements.

Little Snitch and the Deprecation of Kernel Extensions
[automerge]1585170353[/automerge]
how about you ****ing let ME decide what I run, mkay?
No one is forcing you to purchase a Macintosh or use macOS. If you don't like the way Apple is going with macOS then run a different OS. Check out Elementary OS.
 
Last edited:
The thing is, must developers will just drop macOS support or just Safari support. Look how many apps support the TouchBar or the TouchID on macOS. Must plugins will not run in Safari and just ask you to download Chrome. Most enterprise tools are 32-but and will not run on macOS Catalina, instead of updating them, they pulled support for macOS.
 
  • Like
Reactions: venom600
You would at least expect Apple to have a proper replacement in place before deprecating functionality and throwing errors in the face of users. According to the folks over @ objective development, that’s not the case, quoting from: https://blog.obdev.at/little-snitch-and-the-deprecation-of-kernel-extensions/
The replacement APIs that are currently available (NetworkExtension framework on macOS 10.15.4) are not yet completely sufficient to implement the full functionality of Little Snitch. But we are working closely with Apple to fill the remaining gaps and we expect that a beta of the next major macOS version (most likely available at the next WWDC) or even an upcoming version of 10.15 will provide what is missing. As soon as the APIs allow us, we will complete the transition of Little Snitch to the new NetworkExtension API. It’s our goal to provide a public beta in June 2020 and a stable version in October.
Apple also deprecated OpenGL and OpenCL last year, but will be supporting it for longer while the replacement (metal) is already feature-complete for a few years now. OpenGL is of course more commonly used, but Apple didn’t really care with the 32-bit transition either.
 
It's nothing to do with security. It's about total control of the hardware & software experience, like on iOS.

They've been doing it slowly but surely over the last number of years.

You know that system extensions are running with pretty much full control of your hardware, yes?
You know that third party software developers are generally not interested in security of Apple's platform?


A plus B = system extensions are a security hole you can drive a truck through, that Apple will cop the blame for but is not responsible for when people get hacked.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.