News for hackers. Stuff that matters.
Re:Little Snitch 3 – Protect your privacy by noja on Friday January 20, 2017 @09:31AM (#13443973)
Excellent product, but needs some kind of rule sharing feature. There are so many network requests from different components that it can be overwhelming knowing what to allow.
Re:Little Snitch 3 – Protect your privacy by mattkevan on Friday January 20, 2017 @09:51AM (#13444141)
Definitely agree. I like the idea of it, but when I installed it for the first time and rebooted, it fired off so many confirmation requests for various cryptic services I had no idea what they were, I removed it just as soon as I'd managed to click through them all.
Re:Little Snitch 3 – Protect your privacy by kstrauser on Friday January 20, 2017 @12:54PM (#13445522)
Little Snitch is noisy AF for the first day or so, but that's also kind of the point, right? You're running it because you want to know which apps are doing what. Those first sessions are enlightening. Wow, my laptop talks to all the things! That drops very quickly, though, as you tell it "yes, allow Slack to connect to" and "no, don't let Safari talk to sketchy.ru:8765".

I still get the occasional popup, but now they're limited almost exclusively to newly installed apps that I'm running for the first time. That's still an eye-opener: no, I don't see a need for a calculator to connect to Google Analytics. Deny!

Except for gamed, of course. There's no rhyme nor reason to which hosts and ports it wants to talk to. If you ever want to hack a Mac running Little Snitch, call your process "gamed" and the own will allow it through (if they haven't already set "allow connections to any host and port because alert fatigue lol").

Re:Little Snitch 3 – Protect your privacy by tedmiston on Friday January 20, 2017 @11:02AM (#13444704)
It definitely takes some time, effort, and research to get past this initial phase. In the future, I hope they explore more automation / semi-automation around system processes.
Re:Little Snitch 3 – Protect your privacy by manmal on Friday January 20, 2017 @09:33AM (#13443994)
Or something like blacklists for known offender programs.
Re:Little Snitch 3 – Protect your privacy by lrem on Friday January 20, 2017 @06:56PM (#13447931)
I used to use a competitor, https://www.oneperiodic.com/products/handsoff/. As far as memory serves, it had some kind of rule sharing, but I didn't like it at all (why would I trust rules made by someone else?)

One possible way to do this well would be displaying information about how many people blocked/allowed. Then maybe following the crowd if it is converged enough, e.g. ≥1k votes with ≥95% same decision. But, this might be technically and socially challenging (people who care about this level of privacy may not want to share their rules; you need to make sure that no malware developer can game the system; people need to trust in that).

Re:Little Snitch 3 – Protect your privacy by khana on Friday January 20, 2017 @11:07AM (#13444738)
Therein lies a dilemma: knowing what does what on macOS. I just sit around watching log stream output and wonder why that JPEG is being 'processed' by Safari. But that's another story.