4 ms·

This is a big breach of trust in terms of Apple always being on the side of user privacy. If someone knows enough to install these firewall apps, then they kno

This is a big breach of trust in terms of Apple always being on the side of user privacy. If someone knows enough to install these firewall apps, then they know enough to figure out what they want to enable/disable even for Apple applications. If Apple thinks certain rules cause issues, they certainly could work with the developer of these apps to educate users of adverse effects when certain things cause unintended issues for the user. The decision should still lie with the user. Bypassing firewalls by privileging some traffic is not okay. Looks like for now, the only real option is an external device you always connect through running pfsense or another firewall, which is not too big a deal for use on a home network, but requires carrying around another device when on other networks.

lifty 6y ago
I would love if there would be a small appliance based on a raspberry pi zero or something of similar size, that could be controlled/configured from an app on your phone. This device would be powered through a usb cable (no data) from your laptop, and act as a WiFi hotstpot that you can use to route all your traffic via the VPN or network of your choice. Even if your laptop would be infected by malware or a rootkit, it would be impossible to avoid the little physical VPN/firewall.
- tankenmate 6y ago
  This is basically what pi-hole is, as to controlling it from a phone app, well it has a web interface.
  - lifty 6y ago
    That's how I use pi-hole as well. But I would like something that has wireguard and tor as well, in a nice maintainable package or little box.
- ignoramous 6y ago
  https://firewalla.com/ https://firewalla.com/ might be it, though I am sure there are other similar products. Disclaimer: I work on a similar product but for smartphones.
  - lifty 6y ago
    This looks awesome! Thanks
- wyld 6y ago
  I've been pretty happy with the PiHole Remote app https://apps.apple.com/us/app/pi-hole-remote/id1515445551 https://apps.apple.com/us/app/pi-hole-remote/id1515445551
dkonofalski 6y ago
>If someone knows enough to install these firewall apps Your statement implies that it's difficult to install these apps. Installing Little Snitch is no different than installing any other macOS app. Also, this isn't specifically against Little Snitch, it's about any app that could potentially compromise a user's network traffic. Little Snitch is obviously a desired use of these features but how do you then differentiate it from the undesired uses?

lifty 6y ago

I would love if there would be a small appliance based on a raspberry pi zero or something of similar size, that could be controlled/configured from an app on your phone. This device would be powered through a usb cable (no data) from your laptop, and act as a WiFi hotstpot that you can use to route all your traffic via the VPN or network of your choice. Even if your laptop would be infected by malware or a rootkit, it would be impossible to avoid the little physical VPN/firewall.

tankenmate 6y ago
This is basically what pi-hole is, as to controlling it from a phone app, well it has a web interface.
- lifty 6y ago
  That's how I use pi-hole as well. But I would like something that has wireguard and tor as well, in a nice maintainable package or little box.
ignoramous 6y ago
https://firewalla.com/ https://firewalla.com/ might be it, though I am sure there are other similar products. Disclaimer: I work on a similar product but for smartphones.
- lifty 6y ago
  This looks awesome! Thanks
wyld 6y ago
I've been pretty happy with the PiHole Remote app https://apps.apple.com/us/app/pi-hole-remote/id1515445551 https://apps.apple.com/us/app/pi-hole-remote/id1515445551

dkonofalski 6y ago

>If someone knows enough to install these firewall apps Your statement implies that it's difficult to install these apps. Installing Little Snitch is no different than installing any other macOS app. Also, this isn't specifically against Little Snitch, it's about any app that could potentially compromise a user's network traffic. Little Snitch is obviously a desired use of these features but how do you then differentiate it from the undesired uses?