elesiuta

11 ms·

1. 91.▲
   by elesiuta 5y ago

   I found just using a different port was enough for me and didn't need port knocking to reduce log noise, which I agree is super important. I also have alerts for both failed SSH or failed wireguard connections, and for any logins from
2. 92.▲
   by elesiuta 5y ago

   I think GlassWire's bandwidth monitor is great, but don't think their firewall feature is equivalent to "Block on First Sight." Taking a quick look MAPS block at first sight, it appears to look at both the executable fil
3. 93.▲
   by elesiuta 5y ago

   One thing I forgot to mention is that by using hashes to identify executables, picosnitch can provide more reliable intrusion detection since different executables can appear to be located on the same path. For example, it can successfully
4. 94.▲
   by elesiuta 5y ago

   Picosnitch tracks every executable that connects to the internet and notifies you the first time something connects, or if the hash changes (it can also check VirusTotal). There is also a simple curses based UI for browsing and filtering th
5. 95.▲
   Show HN: Picosnitch – a reliable and lightweight security/privacy tool for Linux(elesiuta.github.io)

   92 points by elesiuta 5y ago|10 comments
6. 96.▲
   by elesiuta 5y ago

   I actually just spent the last few months working on a new program called picosnitch that does almost exactly what you're looking for. And as you can probably tell from the name, it was inspired by Little Snitch. It watches your system