Re:Micro Snitch – Know when someone spies on you
by brennebeck on Friday October 12, 2018 @09:53AM
(#18201418)
Wouldn’t LittleSnitch be ideal in this situation to assist in checking if MicroSnitch is phoning home?
Re:Micro Snitch – Know when someone spies on you
by lucideer on Friday October 12, 2018 @10:39AM
(#18201717)
LittleSnitch does tell you when LittleSnitch and MicroSwitch phone home (auto-update checks only as far as I've seen), but they're the same developers so theoretically if one could fake one, one could fake both: they could be tightly coupled.
So you have to implicitly trust the ObDev guys, and you have to implicitly trust the hardware, but beyond those two assumptions they function great for any other threat models.
Would still be nice if they were both open source but hey: I use the open source vscode and it phones home uncontrollably all the time, so source code only benefits us so much.
Re:Micro Snitch – Know when someone spies on you
by brennebeck on Friday October 12, 2018 @11:10AM
(#18201922)
Agreed. I replied in a sibling[0], which I think is relevant here. It seems I should definitely queue looking into what testing has been publicly done, etc. and collate that.
>Would still be nice if they were both open source but hey: I use the open source vscode and it phones home uncontrollably all the time, so source code only benefits us so much
Yup; definitely true.
Re:Micro Snitch – Know when someone spies on you
by w1nst0nsm1th on Friday October 12, 2018 @09:57AM
(#18201438)
Who knows if LittleSnitch is not a "social hack" by itself ?
Re:Micro Snitch – Know when someone spies on you
by brennebeck on Friday October 12, 2018 @10:14AM
(#18201533)
Interesting thought. I would assume some audits have been done via blackbox testing of some sort (e.g. hardware monitor, routing all traffic through a proxy and logging it, etc.) by some infosec group/Co, but I also haven’t researched that.
Re:Micro Snitch – Know when someone spies on you
by djsumdog on Friday October 12, 2018 @10:11AM
(#18201520)
I think there was a talk on breaking LittleSnitch at either Defcon or B-sides a few years back. I couldn't get in though; it was full. Whatever it was is probably fixed by now anyway.
Re:Micro Snitch – Know when someone spies on you
by imdsm on Friday October 12, 2018 @10:16AM
(#18201549)
IIRC, that issue was patched.
https://www.theregister.co.uk/2016/08/03/mac_firewall_little...
It's definitely not something I'd ever trust completely, not only could it be spying on you, but I also don't really trust my hardware. However, I must say, it's still very nice to have. It at least narrows the possible spying vectors, and it's nice to know immediately what apps are listening; the best example being Android Studio emulator: always listening.