News for hackers. Stuff that matters.

A comment on Little Snitch and the deprecation of kernel extensions. Parent comment

Re:Little Snitch and the deprecation of kernel extensions by kalleboo on Tuesday March 24, 2020 @07:40PM (#22680254)
Doesn't the network stack end with sending everything to userspace (user applications) in the end anyway? As long as it doesn't take multiple round trips...
[ Parent | on HN ]
Re:Little Snitch and the deprecation of kernel extensions by wmf on Tuesday March 24, 2020 @08:25PM (#22680619)
Multiple round trips is exactly what I'm concerned about. Imagine a connection going from, say, Safari to the kernel to Little Snitch to the kernel to the NIC. It may not work this way though.

Anything tun-based tends to have the same problem.

[ Parent | on HN ]
Re:Little Snitch and the deprecation of kernel extensions by chupasaurus on Tuesday March 24, 2020 @07:47PM (#22680314)
Firewall is also a part of kernel (dunno about macOS though) so the traffic might not come out.
[ Parent | on HN ]