CIA trying to inject into Little Snitch

Re:CIA trying to inject into Little Snitch by sly010 on Tuesday March 07, 2017 @02:38PM (#13813907)

Exactly. Firewalls like Little Snitch primarily filter traffic primarily based on the binary initiating the connection, and only secondarily based on the target port or address. When little snitch pops up the 10th time in 30 seconds, you will just approve all traffic from your browser, so using the browser to send all traffic is great way to avoid being caught.

As for what "injecting into little snitch" means, it could either mean injecting code into little snitch, because little snitch probably doesn't filter itself OR injecting a rule into little snitch.

[ Parent | on HN ]

Re:CIA trying to inject into Little Snitch by nathancahill on Tuesday March 07, 2017 @05:58PM (#13815970)

Little Snitch does filter itself, but the Allow rules are there by default. I remember on a previous version, one of the steps to pirate LS was adding a rule to block it from connecting to it's servers.

[ Parent | on HN ]

Re:CIA trying to inject into Little Snitch by 15155 on Tuesday March 07, 2017 @07:21PM (#13816651)

They've added internal protection against this in recent versions.

[ Parent | on HN ]

Re:CIA trying to inject into Little Snitch by kordless on Tuesday March 07, 2017 @03:57PM (#13814796)

Casually browsing the archive, I saw something related to injecting payloads into OSX applications. The application that did this required the latest version of XCode to compile, according to the installation and build docs.

[ Parent | on HN ]

Re:CIA trying to inject into Little Snitch by lostlogin on Wednesday March 08, 2017 @04:26AM (#13819086)

Are you suggesting that this indicates recent activity on the project?

[ Parent | on HN ]