Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

191–200 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#191
post #152

Earlier quoted context omitted.

I handle this for my whole network with a pi-hole[0]. [0] https://pi-hole.net

When I tried pi-hole I was amazed by it. Until the day I discovered someone in China hacked it :-///

...and how did you come to the conclusion they hacked the pi-hole?

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#192
post #152

Earlier quoted context omitted.

My solution right now (on macOS) is Gas Mask[1] (a menubar hosts file manager) combined with some very nice hosts files[2]. It certainly kills of most of the pop-ups I run into. [1]: https://github.com/2ndalpha/gasmask [2]: https://github.com/StevenBlack/hosts

I handle this for my whole network with a pi-hole[0]. [0] https://pi-hole.net

Yep, pi-hole - on a raspberry pi - is awesome.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#193
post #171

Earlier quoted context omitted.

What if I start a DNS service that blocks every ad server domainname in the "EasyList"? Personally I avoid using third party DNS, but if there is demand for this...

I do this on my home network. It works well, so I encourage you to build this out. As an added bonus As a service you could point the dns entries to your own web server and serve up cat pictures or motivational pictures in place of ads.

No need to build anything: https://pi-hole.net/

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#194

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

I would recommend to just use the Advanced Gui of Windows Firewall + Group Policy.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#195
post #90

I've been using all Objective See projects, but I have issues with: - stability - often their tools have memory leaks; - consistent UX - each tool looks and behaves differently; - stacking of dialogs - often by the time I click, a new popup replaces the old one, and I approve something I don't even get a chance to see!

You should report the problems to the Developer, he's very responsive...

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#196
post #66
post #60

Earlier quoted context omitted.

Non-commercial clauses are explicitly prohibited by the OSD.

open-source != Open Source open-source == source code is open Open Source == licensed compliant with the OSI's OSD right?

> open-source == source code is open

Not right. The problem with this definition is that it doesn't confer any extra rights. It doesn't mean very much if you can read the source code if you're not allowed to use it, study it, modify it or release modified copies. Microsoft does this, actually. They release the source code of the C runtime library, but it's All Rights Reserved, so you can't really do anything with it except use it for debugging. You have no extra rights to it than if they didn't release it and you reverse-engineered it from the CRT binaries instead. Even your right to study it is in question. You can't contribute to the Wine CRT if you've seen the official CRT source.[1]

So, for a program to be "open source," under the commonly understood definition, it must confer some rights. Most organizations that deal in free and open source software, like the OSI, FSF, and Debian, have agreed that this includes the right to use the program for any purpose, including commercial purposes.

Non-commercial use clauses for software are really troublesome, too. For example, if a small family-owned business uses the same computer for personal and business work, are they allowed to use LuLu at all? If another Objective C developer is reading LuLu's source code and they come across a utility or widget or something that they want to use in their own software, can they use it without the troublesome non-commercial use restriction coming with it? (Probably not.)

[1]: https://wiki.winehq.org/Developer_FAQ#Can_I_contribute_if_I....

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#198
post #18

Nowadays it's more important to control and restrict outgoing connections than incoming connections. Who would had thought of that 25 years ago.

The world is going to split into “cheap AI” that runs in the cloud and is free or heavily subsidized by selling your data and giving you biased functionality toward the AI provider and “expensive AI” that runs completely locally and has no or limited outbound connectivity and is solely biased toward the user desires. Hopefully this comes in open source as it will be hard to write and expensive to run on local hardwar…

Nothing is ever so binary.

Our product can run completely locally and do a good job. Allow connectivity to other devices in the building and performance improves. Extend connectivity to our cloud servers and it gets a little better still. You can always revert to lower levels (and an Internet outage would simulate that, for example).

We regard your data as yours unless you want to share it for a specific reason.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#199
post #103

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

I would pay for such a service as well. In addition to that, I would love if this service would allow companies like Apple and Google to maintains their own lists of IP's and update them regularly, so you can be 100% sure that an IP belongs to them.

[disclaimer, I work for google]

I’m sure if Google made such a list there would be another HN article about how Google is evil and trying to cut out competition.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#200
post #152

Earlier quoted context omitted.

I handle this for my whole network with a pi-hole[0]. [0] https://pi-hole.net

This is the way. No need to individually configure all your devices. My DHCP will hand out a local DNS to each client that maps all the ad/malware domains to 0.0.0.0, so if you’re on my network, even as a guest, you get blocking for free.

I've always been hesitant to use DNS to block ads because it's difficult to turn off for non techies. Did the pi hole cause any issues in your experience?
Post reply on HN