Is the author associated with CrowdStrike? I noticed he/she was using FancyBear
LuLu: An open-source macOS firewall that blocks unknown outgoing connections
71–80 of 252 posts
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#72Looks promising. I used to use Little Snitch, but last year they decided to charge for the new version, and I uninstalled it. Little Snitch was effective, but overly complex for the average user. I'm sure it's great for someone who configures networks on a regular basis, but as a Mac user, I just want to use my Mac. If I wanted to twiddle with security settings all day long, I'd still be on Windows. This looks like i…
That comment makes me chuckle. These days, I have close to zero faith in commercial software that is "free", assuming that the business model is selling my data. I happily paid for Little Snitch and was comforted by the fact that I was the customer.
Nothing prevents companies that sell you proprietary software from also selling your data.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#73Nowadays it's more important to control and restrict outgoing connections than incoming connections. Who would had thought of that 25 years ago.
me :) I remember in 2000 when I first installed ZoneAlarm as a trial I noticed that Word wanted to connect to something, and I was thinking "why would Word want to escape my PC? Later I switched to McAfee Corporate Firewall (in which I could even allow/block IPs/ports). Now I am proudly using WFC that someone mentioned in another post earlier.
ZoneAlarm! I had entirely forgotten that! It was back when I was running Windows 2000, what a remote thought...
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#74Earlier quoted context omitted.
> Want a car which is not navigating using cloud AI? Only the rich can afford that... Good. I sure hope only a small fraction of the population will be able to manually drive their car in the future. It would save lives, time, and money for everyone if the bulk of the idiots were unable to manually drive their car.
> It would save lives, time, and money for everyone I'll give you "lives" and "money," but not necessarily time. I live in a place where self-driving vehicles can be spotted fairly regularly. Once a week or so. You can tell by the special license plates. They are always very ponderous, careful drivers. It's fascinating to see them gently slow to a stop for a red light, then take off like a jackrabbit when it turns gr…
I am pretty sure that is because they have to account for all the non-self-driving cars. If all cars were self driving, they could co-ordinate and go a lot faster.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#75Dumb question: is something about OS X’s built in firewall that’s insufficient? Always love new projects like this, just curious though.
In the FAQ, bottom of page:
> Do I need LuLu if I've turned on the built-in macOS firewall?
> Yes! Apple's built-in firewall only blocks incoming connections. LuLu is designed to detect and block outgoing connections, such as those generated by malware when the malware attempts to connect to it's command & control server for tasking, or exfiltrates data.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#76Earlier quoted context omitted.
Non-commercial clauses are explicitly prohibited by the OSD.
open-source != Open Source open-source == source code is open Open Source == licensed compliant with the OSI's OSD right?
No, I'd say that your "open source" is either "shared source" or "source available" - depending on exact terms - using terms that we've been using for a couple of decades now.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#77Looks promising. I used to use Little Snitch, but last year they decided to charge for the new version, and I uninstalled it. Little Snitch was effective, but overly complex for the average user. I'm sure it's great for someone who configures networks on a regular basis, but as a Mac user, I just want to use my Mac. If I wanted to twiddle with security settings all day long, I'd still be on Windows. This looks like i…
oh dear, LittleSnitch wanted to charge money for creating a really handy tool, how terrible.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#78Unfortunately, this still has the key flaw that has plagued outbound firewalls since their invention: "Currently, LuLu only supports rules at the 'process level', meaning a process (or application) is either allowed to connect to the network or not. As is the case with other firewalls, this also means that if a legitimate (allowed) process is abused by malicious code to perform network actions, this will be allowed."…
And of course, anything local to the machine can only be trusted as long as you are willing to accept that the kernel is not compromised, because it's pretty trivial for a rootkit that is running in the kernel’s context to conceal files, sockets, or even create unreported network interfaces. I remember that Greg Hoglund's rootkit.com contained several first crude (and not so crude) implementations that could do this kind of things (FU springs to mind?) way back in the mid 2000s or thereabouts.
The answer to that, of course, is that if you are really serious about firewalling, said firewall must be a separate device.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#79Earlier quoted context omitted.
That comment makes me chuckle. These days, I have close to zero faith in commercial software that is "free", assuming that the business model is selling my data. I happily paid for Little Snitch and was comforted by the fact that I was the customer.
Nothing prevents companies that sell you proprietary software from also selling your data.
Well I'm assuming things like this helps:
We do not share nor sell your data.
However you may be referring to the same notion that nothing stops someone from murdering someone else.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#80Looks promising. I used to use Little Snitch, but last year they decided to charge for the new version, and I uninstalled it. Little Snitch was effective, but overly complex for the average user. I'm sure it's great for someone who configures networks on a regular basis, but as a Mac user, I just want to use my Mac. If I wanted to twiddle with security settings all day long, I'd still be on Windows. This looks like i…
That comment makes me chuckle. These days, I have close to zero faith in commercial software that is "free", assuming that the business model is selling my data. I happily paid for Little Snitch and was comforted by the fact that I was the customer.
This comment makes me chuckle. The idea that since you pay for something means that the company won't sell your data.