Jared Henderson jaredh159

Gertrude iOS — Minecraft Bedrock × Network-Extension content-filter incompatibility

Date: 2026-05-21 Status: Root cause isolated. No fix available within the iOS content-filter architecture.

TL;DR

Minecraft Bedrock hangs on launch whenever Gertrude's iOS Network Extension content filter (NEFilterDataProvider, socket filtering) is installed and enabled. It is not caused by block rules, verdicts, dropped traffic, or the Family Controls / Screen

Key-Checking Performance Optimization Report

Overview

The Mac app's network extension filter checks every incoming network request against a list of keys (domains, subdomains, regex patterns, IPs, paths) to decide whether to allow or block it. With ~600 keys across multiple keychains, the linear scan was taking up to 113 μs per request and allocating 630 mallocs, potentially causing browser socket timeouts.

Four optimization techniques were applied across three phases:

FlowType Wire Format Migration

Commits: 2bcc763f (macro migration) · 322bc5f8 (wire format fix)

What Happened

This codebase originally used a runtime code-generation system to produce TypeScript- compatible Codable implementations for Swift enums with associated values. The generated files (Enums+Codable.swift, *+Codable.swift) emitted a cross-language-friendly format where an enum case with a payload serializes as {"case": "foo", "value": }.

Asciidoctor renders these two differently, causing the markdown version to be treated as a compound block quote with extra wrapping.

> I hold it that a little rebellion now and then is a good thing,
> and as necessary in the political world as storms in the physical.
> -- Thomas Jefferson, Papers of Thomas Jefferson: Volume 11

"I hold it that a little rebellion now and then is a good thing,
and as necessary in the political world as storms in the physical."
-- Thomas Jefferson, Papers of Thomas Jefferson: Volume 11

see: https://docs.asciidoctor.org/asciidoc/latest/macros/footnote/#externalizing-a-footnote

see: https://asciidoc.zulipchat.com/#narrow/channel/335219-asciidoc-lang/topic/question.20about.20complex.20footnote.20example/with/566545458

assert_html!(
  horror,
  adoc! {r#"
    :fn-foo: pass:c,q[footnote:foo[formatted _text_]]

	INSERT INTO iosapp.block_rules (id, device_id, rule, group_id, comment, created_at, updated_at)
	VALUES
	(
	gen_random_uuid(),
	'DEVICE_UUID_HERE'::uuid,
	'{"a":{"case":"hostnameContains","value":"media-"},"b":{"case":"hostnameEndsWith","value":".cdn.whatsapp.net"},"case":"both"}'::jsonb,
	NULL,
	'support weak whatsapp: block channels media cdn',
	NOW(),
	NOW()

	INSERT INTO "public"."np_quotes"(
	"id",
	"lang",
	"is_friend",
	"author_name",
	"quote",
	"friend_id",
	"document_id",
	"created_at",
	"updated_at"

	sudo tccutil reset All
	sudo tccutil reset All WFN83LM943.com.netrivet.gertrude.app
	sudo tccutil reset All com.netrivet.gertrude.app
	sudo tccutil reset All .com.netrivet.gertrude.app
	rm -rf ~/Library/Preferences/*
	sudo rm -rf /Library/Preferences/*
	sudo rm -rf /Library/Application\ Support/com.apple.TCC
	# screen recording
	sudo rm -rf ~/Library/Group\ Containers/group.com.apple.replayd
	systemextensionsctl reset

	Task {

	let postmark = get(dependency: \.postmark)

	let db = get(dependency: \.db)
	let admins = try await Admin.query()
	.where(.not(.equals(
	.subscriptionStatus,
	.enum(Admin.SubscriptionStatus.unpaid)
	)))