News for hackers. Stuff that matters.

A comment on CIA trying to inject into Little Snitch. Parent comment

Re:CIA trying to inject into Little Snitch by ryanlol on Tuesday March 07, 2017 @02:21PM (#13813731)
Intent is to evade firewalls that allow per-application rules, such as Little Snitch (I think?) and Windows firewall.
[ Parent | on HN ]
Re:CIA trying to inject into Little Snitch by tetrep on Tuesday March 07, 2017 @02:33PM (#13813854)
> such as Little Snitch (I think?)

Correct. It is likely users allow their primary browser full access to all hosts on ports 80 and 443, if not all ports.

Additionally, launching the browser gives you easy access to all the tastey session cookies and access to their keychain (I assume a lot of people give their default browser on OSX keychain access).

[ Parent | on HN ]
Re:CIA trying to inject into Little Snitch by josefdlange on Tuesday March 07, 2017 @02:25PM (#13813778)
Oh, duh. Wow, dumb me. One of those "can't see the forest for the trees" mistakes on my part. Thanks for the reality check!
[ Parent | on HN ]