That's interesting. I love Little Snitch; there's no parallel in the Linux world, sadly, and I miss it when I'm configuring outbound firewall rules on my Arch b

That's interesting. I love Little Snitch; there's no parallel in the Linux world, sadly, and I miss it when I'm configuring outbound firewall rules on my Arch box. However, I think the trojan is giving up a little easily. Little Snitch has a checkbox titled "Prevent Rule Editing" which is unchecked by default, which implies that a process with the same privileges as the logged in user can create its own "allow" rule through a little bit of AppleScript (or whatever else).