Firewall Auto-allow connections: How to kill "com.facebook.archon.developerID"?

Hi yodasaurus900,

Do you have any other services from the developer installed on your Mac? If so, for help with checking your firewall settings check out the information below found in the article here: Block connections to your Mac with a firewall

"Set firewall access for services and apps

1. On your Mac, choose Apple menu  > System Settings, click Network  in the sidebar, then click Firewall. (You may need to scroll down.)
2. Click Options.
3. If the Options button is disabled, first turn on Firewall.
4. Click the Add button  under the list of services, then select the services or apps you want to add. After an app is added, click its up and down arrows  and choose whether to allow or block connections through the firewall.
5. Blocking an app’s access through the firewall could interfere with or affect the performance of the app or other software that may depend on it.

Important: Certain apps that don’t appear in the list may have access through the firewall. These can include system apps, services, and processes, as well as digitally signed apps that are opened automatically by other apps. To block access for these programs, add them to the list."

You'll also want to be sure the app was uninstalled with the steps outlined here: Uninstall apps on your Mac

Be sure to also check any login items related to Facebook, Meta, or the previous apps installed. Remove login items to resolve startup problems on your Mac

Should the issue remain, reach out to Apple Support directly to further assist.

Contact - Official Apple Support

Contact Apple for support and service - Apple Support

Cheers.

If you want to block the Facebook domains, have at. Two ways to do that are to add the FB domains into /etc/hosts, or to use pfctl (add rules to /etc/pf.conf) to add the domains into the (other) firewall available within macOS.

For /etc/hosts, add rules for each of the domains you no longer want to permit access, using this pattern:

127.0.0.1 www.domain-to-blackhole.com

Then the following command-line command to re-load the caches:

sudo dscacheutil -flushcache

There is a probably somewhat stale list of Facebook domains here:

https://qz.com/1234502/how-to-block-facebook-all-the-urls-you-need-to-block-to-actually-stop-using-facebook

For just the TLDs:

https://robbiesblog.com/domain-names-owned-by-facebook/6543

And yikes Meta have a lot of domains.

Per what little is documented of this, that com.facebook.archon.developerID appears to be Facebook Messenger.

If that app ID is getting re-added, then it appears Facebook Messenger or something dependent on Messenger is still around. Maybe some app using the Facebook SDK?