Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

Post reply on HN
Print view View original

151–160 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#151

Post by hesk »

reaperducer wrote: post #126
ballenf wrote: post #57

Earlier quoted context omitted.

That comment makes me chuckle. These days, I have close to zero faith in commercial software that is "free", assuming that the business model is selling my data. I happily paid for Little Snitch and was comforted by the fact that I was the customer.

>I happily paid for Little Snitch and was comforted by the fact that I was the customer. I paid for it, too. But then the upgrades went from complimentary to paid, and I bailed.

The new major version offers a lot more functionality. I looked into it and decided I wanted it, so I upgraded. I assume that I could have stayed with the old major version but I'm not sure.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#152

Post by jachee »

simongr3dal wrote: post #115
killjoywashere wrote: post #65

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

My solution right now (on macOS) is Gas Mask[1] (a menubar hosts file manager) combined with some very nice hosts files[2]. It certainly kills of most of the pop-ups I run into. [1]: https://github.com/2ndalpha/gasmask [2]: https://github.com/StevenBlack/hosts

I handle this for my whole network with a pi-hole[0].

[0] https://pi-hole.net

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#155

Post by nkristoffersen »

adjohn wrote: post #145
zarify wrote: post #127

Earlier quoted context omitted.

I know it's not the same thing, but I use TripMode on macOS for your last two points, which selectively blocks app access based on what network you're connected to.

I second this! TripMode is a great product if you frequently tether with your phone, or connect to wifi networks with limited bandwidth (airplanes).

Third it! Trip mode is great. I tether from my phone a lot and need to protect my data from background usage.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#156

Post by mtgx »

ComputerGuru wrote: post #2

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

Glasswire 1.x was quite a nifty firewall/network monitoring tool and you could easily see all the dozens of outbound connections Microsoft launches from Windows 10.

Unfortunately, version 2.0 is no longer free. Windows 10 Firewall Control looks pretty good functionality wise, but it would be better if it had Glasswire's interface or one that's even better.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#157

Post by Abishek_Muthian »

The author is not subtle in letting know that this is intended to be open source replacement for Little Snitch (domain!).

But at-least macOS has little snitch, closest for Linux was opensnitch which was announced on HN few months back - https://github.com/evilsocket/opensnitch/ but I'm not sure whether it's actively being developed though.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#158

Post by jackvalentine »

killjoywashere wrote: post #149
zerokernel wrote: post #116

Earlier quoted context omitted.

We'll just outlaw that. Compare: Jaywalking, avenues.

"Machine kills human because human violated traffic law" will never fly.

I think it will. The above poster's reference to how 'jaywalking' became a crime after motor vehicles associations conducted heavy PR campaigns to banish pedestrians from what once were shared streets is instructive.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#159

Post by always_good »

zarify wrote: post #130
prepend wrote: post #114

Earlier quoted context omitted.

It’s the charge for upgrades that I don’t like. I bought it once, upgrades should be free. Or so significant that I want to pay.

Considering Apple's constant shifting of goalposts with macOS, what counts as "significant" in your book, even disregarding user-facing features? And how significant is the ~$50 they want for it?

It's just $25 for an upgrade.

I have to roll my eyes at someone who scoffs at a $25 upgrade every few years.

If they're not cool with funding any future development on the product, then they must be cool with not upgrading. But of course they instead entitle themselves to all of your future labor because they once threw some shekels your way.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#160

Post by 2dvisio »

jachee wrote: post #152
simongr3dal wrote: post #115

Earlier quoted context omitted.

My solution right now (on macOS) is Gas Mask[1] (a menubar hosts file manager) combined with some very nice hosts files[2]. It certainly kills of most of the pop-ups I run into. [1]: https://github.com/2ndalpha/gasmask [2]: https://github.com/StevenBlack/hosts

I handle this for my whole network with a pi-hole[0]. [0] https://pi-hole.net

When I tried pi-hole I was amazed by it. Until the day I discovered someone in China hacked it :-///
Post reply on HN