3 ms·

A few rules per week sounds like a lot. I think I am not paranoid enough to micromanage my connections like this.

by BadBadJellyBean 2y ago

haswell 2y ago
In terms of time spent, that amounts to about one minute per week for me right now. Sometimes less. The user experience is streamlined, and adding rules involves responding to a dialog that automatically pops up when a connection is attempted. UX is key here and this would be a very different story if you had to go into a separate rule management interface every time. Regarding paranoia, I don’t see it that way. Supply chain attacks are alive and well, and if you’re running other people’s code on a regular basis, this is a low cost precautionary measure. I totally recognize that not everyone has the same risk profile or tolerance.
cam_l 2y ago
I have found it makes me less paranoid, which is good. In using it for a while, I have only found a few pieces of software trying to access places I don't expect and don't approve of (quite a few more that I do expect, but don't approve of). And none of them seemed to be actively malicious, just misbehaved or poorly configured.
mnahkies 2y ago
Generally I don't get many prompts day to day, if I do it's because something has changed or I'm using a new application and I find it comforting to know what's going on. You can make rules based on host, process arguments, etc so it's pretty flexible for allowing stuff you consider safe and staying out the way. Long ago I used zonealarm on windows and it's a pretty similar ux to that. I still use firejail or docker for anything that might be sketchy, but it's been super interesting seeing what trusted applications are doing. For example I was a bit shocked that the gnome calculator app was making network requests but it turned out it was for currency exchange rates.

3 ms·

A few rules per week sounds like a lot. I think I am not paranoid enough to micromanage my connections like this.

by BadBadJellyBean 2y ago

A few rules per week sounds like a lot. I think I am not paranoid enough to micromanage my connections like this.

haswell 2y ago
In terms of time spent, that amounts to about one minute per week for me right now. Sometimes less. The user experience is streamlined, and adding rules involves responding to a dialog that automatically pops up when a connection is attempted. UX is key here and this would be a very different story if you had to go into a separate rule management interface every time. Regarding paranoia, I don’t see it that way. Supply chain attacks are alive and well, and if you’re running other people’s code on a regular basis, this is a low cost precautionary measure. I totally recognize that not everyone has the same risk profile or tolerance.
cam_l 2y ago
I have found it makes me less paranoid, which is good. In using it for a while, I have only found a few pieces of software trying to access places I don't expect and don't approve of (quite a few more that I do expect, but don't approve of). And none of them seemed to be actively malicious, just misbehaved or poorly configured.
mnahkies 2y ago
Generally I don't get many prompts day to day, if I do it's because something has changed or I'm using a new application and I find it comforting to know what's going on. You can make rules based on host, process arguments, etc so it's pretty flexible for allowing stuff you consider safe and staying out the way. Long ago I used zonealarm on windows and it's a pretty similar ux to that. I still use firejail or docker for anything that might be sketchy, but it's been super interesting seeing what trusted applications are doing. For example I was a bit shocked that the gnome calculator app was making network requests but it turned out it was for currency exchange rates.