3 ms·
Reverse engineering and exploitation of a Little Snitch vulnerability
- based2 10y agohttps://www.reddit.com/r/netsec/comments/4u3p18/reverse_engineering_and_exploitation_of_a_little/ https://www.reddit.com/r/netsec/comments/4u3p18/reverse_engi...
- wyager 10y agoIt seems rather risky to trust one's network security to a software that is not only closed-source, but actively tries to resist analysis. Great write-up.
- EdwardCoffin 10y agoDid you notice that in the introductory paragraphs the author says of it: I personally make sure it’s the first thing I install when configuring new OS X images.
- arm 10y agoAs noted in the article, the newest version of Little Snitch (3.6.4) contains fixes for the issues: “Little Snitch developers Objective Development already released version 3.6.4 with fixes for both problems. Hat tip to them for the quick fix turnaround and pleasant no-drama email exchange regarding these issues. You should update your copy of Little Snitch as soon as possible.” http://f.cl.ly/items/260l0j2l0e1A1j0x2R0B/littlesnitch3_6_4.png http://f.cl.ly/items/260l0j2l0e1A1j0x2R0B/littlesnitch3_6_4....
- cloudjacker 10y agoUsing Little Snitch to run a pirated version of Little Snitch to find an exploit in Little Snitch and notify Little Snith
- roddux 10y agoFor those who don't know: Little Snitch is an OS X firewall, which prompts the user to allow/deny any outbound connections. This is a very detailed write-up, a good read.