OpenSnitch is a GNU/Linux port of the Little Snitch application firewall

Re:OpenSnitch is a GNU/Linux port of the Little Snitch appli... by kccqzy on Friday January 31, 2020 @09:09PM (#22208076)

Also I personally also am a huge fan of Little Snitch, I do want to caution everyone who rushes to install that, after all, like all software Little Snitch has bugs, and because it runs in ring 0, any bugs can potentially have annoying consequences, including being exploited by malware.

See for example this news report[0] or the DEF CON talk[1].

I personally do use Little Snitch, but this is after consideration of my own privacy desire against risk of security holes being exploited. I personally chose the former. You should personally weigh these and decide.

[0]: https://www.theregister.co.uk/AMP/2016/08/03/mac_firewall_li...

[1]: https://media.defcon.org/DEF%20CON%2024/DEF%20CON%2024%20pre...

[ Parent | on HN ]

Re:OpenSnitch is a GNU/Linux port of the Little Snitch appli... by labawi on Saturday February 01, 2020 @04:51AM (#22209678)

Opensnitch does not run in ring 0, though it does run as root.

[ Parent | on HN ]

Re:OpenSnitch is a GNU/Linux port of the Little Snitch appli... by wadkar on Saturday February 01, 2020 @07:30AM (#22210169)

From malware/exploitation perspective, aren’t two the same things?

[ Parent | on HN ]

Re:OpenSnitch is a GNU/Linux port of the Little Snitch appli... by kstrauser on Saturday February 01, 2020 @11:55AM (#22211520)

Not really. For instance, there’s a lot of stuff you can’t do as root on a Mac because of SIP. If you’re in the kernel, all bets are off.

[ Parent | on HN ]

Re:OpenSnitch is a GNU/Linux port of the Little Snitch appli... by dmurray on Saturday February 01, 2020 @08:39PM (#22214579)

I would think Little Snitch reduces your attack surface enough that it's a strict improvement in security, not just privacy. After all, macOS has bugs too.

[ Parent | on HN ]