Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

Post reply on HN
Print view View original

131–140 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#131

Post by inopinatus »

coding123 wrote: post #79
craftyguy wrote: post #72

Earlier quoted context omitted.

Nothing prevents companies that sell you proprietary software from also selling your data.

Well I'm assuming things like this helps: We do not share nor sell your data. https://www.obdev.at/privacy-policy.html However you may be referring to the same notion that nothing stops someone from murdering someone else.

Outcomes from such clauses also hinge on whether metadata describing the operation of their system - such as logs showing who communicated with who - is your data, or their data.

Following recent changes to law here in Australia, for example, metadata is essentially the property of the state.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#132

Post by rsfinn »

jle17 wrote: post #83
chisleu wrote: post #66

Earlier quoted context omitted.

open-source != Open Source open-source == source code is open Open Source == licensed compliant with the OSI's OSD right?

Are you seriously arguing that you can arbitrarily change the meaning of well understood words simply by adding a dash to them ?

You can certainly change the meaning of well understood words in English by capitalizing them: polish != Polish, windows != Windows, etc. Furthermore, adding a hyphen to convert a noun phrase to an adjective seems to me to be a common and non-controversial practice in English.

(Yes, I believe I understand your position, but I think you're going to have to rephrase your objection.)

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#133

Post by killjoywashere »

igravious wrote: post #118
killjoywashere wrote: post #109

Earlier quoted context omitted.

I want to drop that list into little snitch. In fact, when I install Little Snitch, I want it to ask me "would you like to subscribe to iamdave's list?"

Like how a number of different ad blockers subscribe to the EasyList ad blocking list, correct? https://easylist.to/ “ The links listed below allow you to select filter lists for use in your browser provided that you are using a compatible ad blocker (tested with Adblock Plus, AdBlock and uBlock Origin). Furthermore, EasyPrivacy Tracking Protection List is available for Internet Explorer 9 and higher. ”

Yes, but at the OS level, not the browser level.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#134

Post by whatshisface »

TeMPOraL wrote: post #48
erAck wrote: post #18

Nowadays it's more important to control and restrict outgoing connections than incoming connections. Who would had thought of that 25 years ago.

I think Stallman realized that back then. But yeah, current situation is getting ridiculous. One could always expect malicious actors, but I didn't guess people will be routinely putting in the cloud things that have no business being Internet-dependent. Then again, I remember first reading pg's essays, in which he praised the benefits of running things on your server and delivering them as a webpage, instead of stan…

It does make piracy impossible, though. The ultimate user-hostility for the ultimate bad-actor-hostility. It's like the infinite limit of DRM.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#135

Post by [deleted] »

prepend wrote: post #114
keyboardmonkey wrote: post #77

Earlier quoted context omitted.

oh dear, LittleSnitch wanted to charge money for creating a really handy tool, how terrible.

It’s the charge for upgrades that I don’t like. I bought it once, upgrades should be free. Or so significant that I want to pay.

[deleted]

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#136

Post by meifun »

willstrafach wrote: post #94
pdonis wrote: post #52

Unfortunately, this still has the key flaw that has plagued outbound firewalls since their invention: "Currently, LuLu only supports rules at the 'process level', meaning a process (or application) is either allowed to connect to the network or not. As is the case with other firewalls, this also means that if a legitimate (allowed) process is abused by malicious code to perform network actions, this will be allowed."…

> In other words, it won't stop malicious Javascript running in your browser from making an outbound connection, which is the most common way for malware to do that. This might be possible, if you start off with deny-all as the default and then start manually adding exceptions as you browse.

Let me ask, seriously: if we take the Great Firewall of China, it does all sorts of packet inspection. Why can't this be applied to personal firewalls and inspect the traffic leaving (or coming in) for malicious content being masked as allowed traffic, etc?

There was a company called Packeteer that did traffic shaping/inspection....could any concepts be applied to firewalling as they were to traffic prioritization?

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#137

Post by vim_wannabe »

prepend wrote: post #114
keyboardmonkey wrote: post #77

Earlier quoted context omitted.

oh dear, LittleSnitch wanted to charge money for creating a really handy tool, how terrible.

It’s the charge for upgrades that I don’t like. I bought it once, upgrades should be free. Or so significant that I want to pay.

Now we just need to figure out who pays for those upgrades. I think we could try a scheme where we keep growing the user base so more recent customers pay for the prior customers' upgrades.

Hmm, wait a minute...

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#138

Post by shibel »

killjoywashere wrote: post #65

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

An MVP for this would be quite simple to build. Do you happen to use Little Snitch? AFAIK, they don't really have an import/export option (their "backup" option is tied to the user account), but I've found a way around this limitation that is only a tad little more tedious than an auto-workflow.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#139

Post by sudouser »

killjoywashere wrote: post #133
igravious wrote: post #118

Earlier quoted context omitted.

Like how a number of different ad blockers subscribe to the EasyList ad blocking list, correct? https://easylist.to/ “ The links listed below allow you to select filter lists for use in your browser provided that you are using a compatible ad blocker (tested with Adblock Plus, AdBlock and uBlock Origin). Furthermore, EasyPrivacy Tracking Protection List is available for Internet Explorer 9 and higher. ”

Yes, but at the OS level, not the browser level.

host file?
Post reply on HN