lapcat

16 ms·

271.
by lapcat 6mo ago
> Various intelligence agencies are willing to pay 2-3M for a working exploit for iphone or android. Little Snitch is not a working exploit for iPhone or Android. > I think that they would be fine with paying 50M for a userbase that h
272.
by lapcat 6mo ago
> surely you know how often it happens that developers of popular extensions are approached by shady businesses and sometimes do even sell. Yes, developers of free extensions who sell for a pittance. I don't have a popular extension
273.
by lapcat 6mo ago
That comment is a screenshot presented with no context, listing a bunch of rather mundane stuff. "This is clownish" https://news.ycombinator.com/item?id=13813828
274.
by lapcat 6mo ago
That's a legitimate criticism. Nonetheless, this subthread started with a comment about supply chain attacks and nation states, which is ridiculous.
275.
by lapcat 6mo ago
> Many from linux crowd are slightly paranoid Slightly? There are quite a few tin foil hat comments on this submission.
276.
by lapcat 6mo ago
1) Little Snitch is not based in the UK or Australia. 2) They are interested in software will billions of users. They are not interested in software with thousands of users.
277.
by lapcat 6mo ago
> Just saying developers have been hacked. So are you going to have this same discussion in every HN submission that mentions any piece of software?
278.
by lapcat 6mo ago
[flagged]
279.
by lapcat 6mo ago
> So pretty much everyone here who is a developer is the target. Are you going to have this same discussion about every piece of software every mentioned on Hacker News? Why are we having it for Little Snitch specifically?
280.
by lapcat 6mo ago
> Their copy of the compiler. This doesn't even make sense. You have no examples.
281.
by lapcat 6mo ago
> Depends on the target and what you can get. Think about Bartender, As I said in another comment, Bartender had no target! It was not an attack. An app was sold by one developer to another developer. End of story. > If you know of so
282.
by lapcat 6mo ago
Bartender was not a supply chain attack! The app was sold for monetary reasons to another developer for monetary reasons. There were no targets involved. There were no nation-states involved. There were no attacks involved. You might not li
283.
by lapcat 6mo ago
> I think the type of users it attracts (techies, crypto ppl, etc) makes it worth more too. No, this by itself doesn't make Little Snitch or any business worth $50M. You're dreaming. That's a crazy valuation.
284.
by lapcat 6mo ago
> Said motivation could be a nation state handing them $XXX million dollars You're missing the most important part of the motivation here: why in the world would a nation-state give a damn about Little Snitch, especially to the tune
285.
by lapcat 6mo ago
> Everything has a price though… What is that supposed to mean in this context?
286.
by lapcat 6mo ago
> If I, the end user, am the target You're not a target, anonymous rando.
287.
by lapcat 6mo ago
> All a long way to say, anyone know anything about this company? Yes, they are indie Mac developers who have been in business for more than 20 years, and Little Snitch for Mac is beloved by many users for a long time.
288.
by lapcat 6mo ago
> They don't build their own machines or write their compilers or write their own crpyto code or ... so many other things. An attack on any of these things has nothing specifically to do with the developers of Little Snitch and woul
289.
by lapcat 6mo ago
> a five dollar wrench. I'm not even going to respond to this ridiculousness. I still don't know why anyone thinks that, among all developers in the world, a little indie Mac developer is getting targeted specifically.
290.
by lapcat 6mo ago
> The same way every other developer that has been hacked. There's not one single way, so, no, you're just hand-waving here.
291.
by lapcat 6mo ago
> I think you know what they’re questioning and why. No, not really. And I disagree with the premise, "They must be a target for the various hacking groups out there." How would you even hack them? I'm a developer too; h
292.
by lapcat 6mo ago
This comment seems a bit confused. A supply chain attack doesn't directly attack an end developer but rather a supplier of the developer. So who or what is the supplier in this case?
293.
by lapcat 6mo ago
> Do you still trust them not to do self-reporting or phoning home, even though it is $0 and closed source? If you trust Little Snitch on Mac, then yes. They've been in business for over 20 years. They're not going to blow thei
294.
by lapcat 6mo ago
"I researched a bit, found OpenSnitch, several command line tools, and various security systems built for servers. None of these gave me what I wanted: see which process is making which connections, and in the best case deny with a sin
295.
by lapcat 6mo ago
> Terminal both require an admin password Not in my testing.
296.
by lapcat 6mo ago
> in Recovery Mode, Terminal does require mounting the data volume first, which typically prompts for an admin password. This is not my experience. The Data volume mounts automatically, and there's no password prompt.
297.
by lapcat 6mo ago
> I'm responding to this quote > > Frank Herbert (yeah, I know I'm a nerd), in God Emperor of Dune, has a character observe The article author and I share a love of Frank Herbert, God Emperor of Dune, and the quote in que
298.
by lapcat 6mo ago
> I'm simply claiming that not everyone needs to be Linux Kernel specialists. This is an uninteresting and indeed silly claim, because nobody has ever asserted the opposite. The point is that society needs some Linux kernel specia
299.
by lapcat 6mo ago
> I can't tell what specialists we will get the same way you wouldn't be able to tell me we will have Linux Kernel specialists at the year 1945. How about addressing astrophysics specifically. What are you claiming about it? Ar
300.
by lapcat 6mo ago
This comment sounds like hand-waving to me. The author describes specifically how specialists are produced and how AI undermines their production. No, we won't get more and more specialists literally "the same way" as the agr

More ›