8 ms·

Play stupid games, win stupid prizes. If you cannot afford Little Snitch or don't want to pay for it or just prefer open source, install LuLu. It's a free and

by Jerry2 6y ago

Play stupid games, win stupid prizes. If you cannot afford Little Snitch or don't want to pay for it or just prefer open source, install LuLu. It's a free and open source alternative to LS application firewall. [1] You can install it through Homebrew or download binaries manually [2]. [1] https://github.com/objective-see/LuLu https://github.com/objective-see/LuLu [2] https://objective-see.com/products/lulu.html https://objective-see.com/products/lulu.html

pram 6y ago
I never understood why objective-see releases all these useful things individually. Surely a comprehensive app that had all the functions would be better?
- Wowfunhappy 6y ago
  I vehemently disagree! Monolith apps are the worst; a single app should focus on doing one thing well. Let's say I already own and use Little Snitch for monitoring traffic, but I want to install RansomWhere to detect malware. Do I get rid of Little Snitch even though I prefer it, or do I deal with having duplicate software on my machine?
  - imtringued 6y ago
    I've seen some programs that are excessively modular. You can always go too far in the other direction.
deeblering4 6y ago
I appreciate the foss alternative, but at the same time it seems downloading binaries manually is also part of the “problem”. It matters a lot what site binaries are downloaded from, and a lot of average users don’t really understand the difference. I suppose as long as a human decision is involved there is room for error. Wonder if this can be solved without going 100% down the app store path.
- SenoraRaton 6y ago
  Arch aur has never let me down.... Linux package managers in general. Curated content, secondary and tertiary content of varying levels of risk. Most high risk activities hidden behind a knowledge gap, yet still available. It is a superior system to directly downloading binaries from random websites, if not only having a single access point increases security.
sillysaurusx 6y ago
Am I the only one who uses piracy to explore new technologies? For example, I pirated ZBrush and spent about a month learning it. At that point I felt I had invested enough time / gained enough skills to justify buying a full license, if I ever need to do more 3D modeling. I had the same experience with Visual Studio back in the day (aka Visual C++ 6.0; fond memories...), and of course photoshop. It’s a stupid game, but quite a personal growth vector.
- tomc1985 6y ago
  This is why a lot of software houses don't come down too hard on individual pirates -- they often become your fans and they might result in business in the future. It's like selling concerts and merch as a musician. Since software dev isn't the domain of lifelong nerds anymore I don't think most folk are as understanding or knowledgeable about the positives of piracy (or related issues around software freedom or the economic properties of digital data), hence your unfortunate downvotes. It's a shame... there are many of us who would not be where we are today, as productive, value-creating citizens, without having learned our trade with pirated software.
  - sillysaurusx 6y ago
    Exactly. I remember begging my mom for Visual C++ 6.0 from eBay for $60 whole dollars when I was like 12, because I had heard that’s what real gamedevs use, and I was determined to become a real gamedev. It’s weird... you can trace that moment to present, and her saying “yes” or “no” would have dramatically changed my economic outcome. Piracy is a wonderful equalizer in that regard. Companies have every right to come down on piracy, but it often works against you if your software is a tool.
    - asciident 6y ago
      What did she say? Don't leave us hanging...
      - sillysaurusx 6y ago
29athrowaway 6y ago
Some open source projects can be compromised and the artifacts can be malicious. It has happened many times.
konaraddi 6y ago
Looks like changes will need to be made for LuLu to work on Big Sur: https://github.com/objective-see/LuLu/issues/183 https://github.com/objective-see/LuLu/issues/183
lioeters 6y ago
I second the recommendation of Lulu. It's such a useful, well-built tool. I use it daily, and it's eye-opening to see all the questionable network requests leaking data.
foobiekr 6y ago
Little Snitch is becoming much, much less useful with in-app DNS-over-HTTPS resolvers. They really need to provide a local DNS/DoH-to-DoH proxy function so they can sniff the traffic without forcing the user to switch off DoH entitely.
- ashton314 6y ago
  For this reason I disabled DNS over HTTPS in Firefox. How much protection and what kind of protection does DNS over HTTPS give you?
- drevil-v2 6y ago
  Doesn’t LS let you block internet access per app per domain? At that level of control why would dns resolution bypass matter when I can still block the app from talking to any arbitrary IP?

by Jerry2 6y ago

pram 6y ago

I never understood why objective-see releases all these useful things individually. Surely a comprehensive app that had all the functions would be better?

Wowfunhappy 6y ago
I vehemently disagree! Monolith apps are the worst; a single app should focus on doing one thing well. Let's say I already own and use Little Snitch for monitoring traffic, but I want to install RansomWhere to detect malware. Do I get rid of Little Snitch even though I prefer it, or do I deal with having duplicate software on my machine?
- imtringued 6y ago
  I've seen some programs that are excessively modular. You can always go too far in the other direction.

deeblering4 6y ago

I appreciate the foss alternative, but at the same time it seems downloading binaries manually is also part of the “problem”. It matters a lot what site binaries are downloaded from, and a lot of average users don’t really understand the difference. I suppose as long as a human decision is involved there is room for error. Wonder if this can be solved without going 100% down the app store path.

SenoraRaton 6y ago
Arch aur has never let me down.... Linux package managers in general. Curated content, secondary and tertiary content of varying levels of risk. Most high risk activities hidden behind a knowledge gap, yet still available. It is a superior system to directly downloading binaries from random websites, if not only having a single access point increases security.

sillysaurusx 6y ago

Am I the only one who uses piracy to explore new technologies? For example, I pirated ZBrush and spent about a month learning it. At that point I felt I had invested enough time / gained enough skills to justify buying a full license, if I ever need to do more 3D modeling. I had the same experience with Visual Studio back in the day (aka Visual C++ 6.0; fond memories...), and of course photoshop. It’s a stupid game, but quite a personal growth vector.

tomc1985 6y ago
This is why a lot of software houses don't come down too hard on individual pirates -- they often become your fans and they might result in business in the future. It's like selling concerts and merch as a musician. Since software dev isn't the domain of lifelong nerds anymore I don't think most folk are as understanding or knowledgeable about the positives of piracy (or related issues around software freedom or the economic properties of digital data), hence your unfortunate downvotes. It's a shame... there are many of us who would not be where we are today, as productive, value-creating citizens, without having learned our trade with pirated software.
- sillysaurusx 6y ago
  Exactly. I remember begging my mom for Visual C++ 6.0 from eBay for $60 whole dollars when I was like 12, because I had heard that’s what real gamedevs use, and I was determined to become a real gamedev. It’s weird... you can trace that moment to present, and her saying “yes” or “no” would have dramatically changed my economic outcome. Piracy is a wonderful equalizer in that regard. Companies have every right to come down on piracy, but it often works against you if your software is a tool.
  - asciident 6y ago
    What did she say? Don't leave us hanging...
    - sillysaurusx 6y ago

29athrowaway 6y ago

Some open source projects can be compromised and the artifacts can be malicious. It has happened many times.

konaraddi 6y ago

Looks like changes will need to be made for LuLu to work on Big Sur: https://github.com/objective-see/LuLu/issues/183 https://github.com/objective-see/LuLu/issues/183

lioeters 6y ago

I second the recommendation of Lulu. It's such a useful, well-built tool. I use it daily, and it's eye-opening to see all the questionable network requests leaking data.

foobiekr 6y ago

Little Snitch is becoming much, much less useful with in-app DNS-over-HTTPS resolvers. They really need to provide a local DNS/DoH-to-DoH proxy function so they can sniff the traffic without forcing the user to switch off DoH entitely.

ashton314 6y ago
For this reason I disabled DNS over HTTPS in Firefox. How much protection and what kind of protection does DNS over HTTPS give you?
drevil-v2 6y ago
Doesn’t LS let you block internet access per app per domain? At that level of control why would dns resolution bypass matter when I can still block the app from talking to any arbitrary IP?