4 ms·
Also from [0]. > You can find Little Snitch for Linux here. It is free, and it will stay that way. Don't worry, the authors know that there's no point in char
by rvz 7mo ago
Also from [0].
> You can find Little Snitch for Linux here. It is free, and it will stay that way.
Don't worry, the authors know that there's no point in charging Linux users. Unlike Mac users.
So you might as well make it $0 and the (Linux) crowd goes wild that they don't need to pay a cent.
However...
> I researched a bit, found OpenSnitch, several command line tools, and various security systems built for servers. None of these gave me what I wanted: see which process is making which connections, and in the best case deny with a single click.
OpenSnitch is open source. You don't need to trust it as you can see the code yourself. Little Snitch on the other hand, is completely closed source.
Do you still trust them not to do self-reporting or phoning home, even though it is $0 and closed source?
[0] https://obdev.at/blog/little-snitch-for-linux/ https://obdev.at/blog/little-snitch-for-linux/
- lapcat 7mo ago> Do you still trust them not to do self-reporting or phoning home, even though it is $0 and closed source? If you trust Little Snitch on Mac, then yes. They've been in business for over 20 years. They're not going to blow their entire business and reputation for a few Linux users.
- emmelaich 7mo agoYep, I trust the obdev.at / Snitch guys. I do wonder however, are they sufficiently careful about their processes and own machines to avoid a supply chain attack completely. They must be a target for the various hacking groups out there.
- lapcat 7mo agoThis comment seems a bit confused. A supply chain attack doesn't directly attack an end developer but rather a supplier of the developer. So who or what is the supplier in this case?
- hsbauauvhabzb 7mo agoThis seems pedantic and I think you know what they’re questioning and why.
- lapcat 7mo ago> I think you know what they’re questioning and why. No, not really. And I disagree with the premise, "They must be a target for the various hacking groups out there." How would you even hack them? I'm a developer too; how would you hack me?
- heartbreak 7mo agoOptions range from carefully targeted phishing or social engineering attacks to poor opsec and a five dollar wrench.
- lapcat 7mo ago> a five dollar wrench. I'm not even going to respond to this ridiculousness. I still don't know why anyone thinks that, among all developers in the world, a little indie Mac developer is getting targeted specifically.
- emmelaich 7mo agoSome targets are more valuable than others. A firewall product has obvious security value. The fact that it requires high privilege is another reason. I have the same thoughts about other Mac apps. e.g. iTerm2 - cause they "see" so much sensitive data.
- lapcat 7mo ago[flagged]
- 7mo ago
- littlesnitch 7mo agoWe have not detected a targeted attack yet. On the Mac side, we are safe: No dependencies on any third party libraries. Only Apple. On the Linux side, there is no single big vendor such as Apple who provides all the necessary libraries. I have tried to choose reputable sources from crates.io only, but to be honest, I don't know a secure solution to the problem.
- emmelaich 7mo agoThanks very much for your reply.
- papascrubs 7mo agoTwo of the three components of LittleSnitch for Linux are open source. The eBPF (kernel portion) and UI are fully open source.