4 ms·
I am using Little Snitch since version 2. Practically all my connections form MacOS to the mothership are stopped by default. I turn off the filter only for upd
by nbzso 5y ago
I am using Little Snitch since version 2.
Practically all my connections form MacOS to the mothership are stopped by default. I turn off the filter only for updates.
I avoid in general Apple software (Preview, Photos, etc.).
Macs are used only for work. My personal information or browsing is done only on Linux with Open Snitch and minimalistic install.
In the new information landscape blind trust can be harmful.
- user3939382 5y agoI couldn’t find a way to black hole CIDR blocks on Little Snitch which is necessary to completely silence macOS. However if you do this at the router you break stuff like iMessage on phones running on the wifi and so forth.
- LinuxBender 5y agoOne small suggestion, consider using tcpdump on your router to make sure LS is really stopping everything. Apple and Microsoft wised up to this some time ago and some things hook in the network stack after the application firewalls. If you spot something please report it to the Little Snitch developers. The amount of data captured by tcpdump can be minimized by only capturing syn/fin/rst packets assuming proto 6 tcp. 'tcp[tcpflags] & (tcp-syn|tcp-fin|tcp-rst) != 0' And if capturing to a file one can also limit the total number of packets captured with -c 1000 This may be useful if you are also capturing proto 17 udp.
- nbzso 5y agoThanks.