7 ms·
If it’s really that important, you should have a hardware firewall on the edge with deny-by-default on outgoing. You cannot trust the security framework on the
by sgjohnson 3y ago
If it’s really that important, you should have a hardware firewall on the edge with deny-by-default on outgoing. You cannot trust the security framework on the endpoint alone.
- lapcat 3y agoA hardware firewall can't do per-process blocking. That's the whole point of Little Snitch. Besides, I wasn't soliciting advice, I was offering criticism. For some reason, a lot of people always confuse those two. Don't say "You cannot trust the security framework" if you really mean that the security framework should be exempt from criticism. And if you don't mean that, then the hardware firewall is a red herring. It's a red herring anyway, because it's not suitable for the use case.