2 ms·
Isn't Little Snitch relying on the OS? If you are going to inspect the OS itself is doing, you need to do the packet sniffing from another computer.
by pdkl95 11y ago
Isn't Little Snitch relying on the OS? If you are going to inspect the OS itself is doing, you need to do the packet sniffing from another computer.
- danieldk 11y agoLet's disambiguate OS first: do you mean the kernel or userland? If userland: Little Snitch loads a kernel extension and monitors every userland process. If kernel: The XNU kernel is open source, so you can check that it doesn't work around Little Snitch and Apple doesn't do telemetry in the kernel (which would be... weird). Of course, theoretically, Apple could work around this using e.g. malicious code in the EFI firmware. But I am pretty sure that someone would've already found this by monitoring at a router.