Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

Post reply on HN
Print view View original

201–210 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#201

Post by nothrabannosir »

jle17 wrote: post #54

Unless I'm mistaken, this isn't actually open source, as it's under a non-commercial clause. edit: there is an open issue about it: https://github.com/objective-see/LuLu/issues/4

People keep claiming that this is a somehow established definition of “open source” (or Open Source or OpEnSoUrCe), but when I look at the people around me it seems a vast (silent) majority actually uses the term that way. “Open source”, in my personal “tests”, means “the source is open.” You may balk at this, but notice the elegance of the definition corresponding to the meaning of the actual words. Free Software is more commonly understood as what people sometimes religiously defend as the meaning of “open source”.

Then someone comes along wagging his finger online saying no, no, no, that’s not what that word means. Just like with “could care less”. You know what? I think the battle is lost. Language doesn’t work that way, and I’m going to call it: Open Source means open source, i.e. source is open. And we would do ourselves a great favour switching to a different term, because we’re swimming upstream in this one.

While we’re on the subject of poor names: the worst mistake Stallman made was calling his movement Free Software. He would have turned a strong undercurrent of PR in his favour [e: by calling it Freedom Software] instead of having to constantly battle the semantics of “Free as in Freedom of Speech, not Free as in Free Beer.”

When people say naming things is one of the two hardest things in programming, I’m wondering if it’s just because programmers are really bad at it.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#202

Post by JetSpiegel »

pdonis wrote: post #52

Unfortunately, this still has the key flaw that has plagued outbound firewalls since their invention: "Currently, LuLu only supports rules at the 'process level', meaning a process (or application) is either allowed to connect to the network or not. As is the case with other firewalls, this also means that if a legitimate (allowed) process is abused by malicious code to perform network actions, this will be allowed."…

For the browser there is always uBlock Origin.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#203

Post by ryandrake »

zacmps wrote: post #200
ryandrake wrote: post #172

Earlier quoted context omitted.

This is the way. No need to individually configure all your devices. My DHCP will hand out a local DNS to each client that maps all the ad/malware domains to 0.0.0.0, so if you’re on my network, even as a guest, you get blocking for free.

I've always been hesitant to use DNS to block ads because it's difficult to turn off for non techies. Did the pi hole cause any issues in your experience?

Vanishingly few. Occasionally, I'm browsing the web and hit a text link that takes me to the browser's "I can't find this site" default screen. This usually happens with sponsored links that are not served from ad networks yet link to known ad sites.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#204

Post by JetSpiegel »

pash wrote: post #41
reaperducer wrote: post #32

Earlier quoted context omitted.

I've seen /, -, --, and +. Any other ones leap to mind? I wonder if there's a complete list somewhere.

The usual convention is a single hyphen for short-form (single-letter) options, and a double hyphen for long-form options: > python -v or > python —-version It’s good practice to offer both. It should also be possible to set multiple options at once by appending one after another in short form following a single hyphen: > ls -alR is the same as > ls -a -l -R Long-form options are technically a GNU thing [0] and are n…

> python -v

That's verbose mode, not Version. You want a capitalized V.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#205

Post by tpetry »

killjoywashere wrote: post #65

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

And extend the idea with community-aggregated whitlists. If i wand to use a software like spotify it for sure hat to load the songs somehow from their servers, so the application-intended ntwork community should be whitelisted.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#206

Post by igravious »

killjoywashere wrote: post #133
igravious wrote: post #118

Earlier quoted context omitted.

Like how a number of different ad blockers subscribe to the EasyList ad blocking list, correct? https://easylist.to/ “ The links listed below allow you to select filter lists for use in your browser provided that you are using a compatible ad blocker (tested with Adblock Plus, AdBlock and uBlock Origin). Furthermore, EasyPrivacy Tracking Protection List is available for Internet Explorer 9 and higher. ”

Yes, but at the OS level, not the browser level.

Love your username.
Post reply on HN