has anyone tried both Hands Off[0] and Little Snitch? How is Hands Off compared to LS?
Also: Radio Silence[1]?
[0]: https://www.oneperiodic.com/products/handsoff/ [1]: https://radiosilenceapp.com/
LuLu: An open-source macOS firewall that blocks unknown outgoing connections
241–250 of 252 posts
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#242Earlier quoted context omitted.
That's because we treat software very differently from most other content subject to copyright. As in this case, (reading the above threads) there's confusion as to the no commercial use clause extends to the content or the outcome of its processes. That is to say, NoCommercialUse for a book clearly means for derivative works. Nobody would ever suggest you can't read a book while in a commercial establishment. But in…
I completely agree with your first sentence. But I think your interpretation of NonCommercial is a bit off. NonCommercial in the context of a book does not refer to "using" the book or to creating derivatives. You don't need a license to read a book. Rather, it refers to copying the book. They have a separate clause that refers to creating derivative works from the book. If you have a CC-BY-NC book, that means you're…
You're distinguishing more finely than I am between exact copies and modified copies. Fair enough. My use of "derivative" above is intended to encompass deriving copies from an original, with or without modification.
To the extent using software inherently means creating copies - so does reading. The image of the page is transferred to my retinas and encoded in the volatile storage of an organic neural network.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#243Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#244Earlier quoted context omitted.
I completely agree with your first sentence. But I think your interpretation of NonCommercial is a bit off. NonCommercial in the context of a book does not refer to "using" the book or to creating derivatives. You don't need a license to read a book. Rather, it refers to copying the book. They have a separate clause that refers to creating derivative works from the book. If you have a CC-BY-NC book, that means you're…
You're distinguishing more finely than I am between exact copies and modified copies. Fair enough. My use of "derivative" above is intended to encompass deriving copies from an original, with or without modification. To the extent using software inherently means creating copies - so does reading. The image of the page is transferred to my retinas and encoded in the volatile storage of an organic neural network.
(I'm making the same distinction between exact and modified copies that the Creative Commons folks make...)
As to your second point... Ha! Fair enough. But IIRC case law has actually recognized that the copies created on a computer as you install and execute a program count as "copies" for the purpose of needing a license for an activity that would otherwise violate copyright. That is why EULAs are, to some extent, considered valid and enforceable. No such case has been made for your retinas encoding the light bouncing off a page and transferring that pattern to your neurons.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#245Earlier quoted context omitted.
Do you load the hosts directly as a remote pointing to the raw file? Gas Mask is complaining about "unknown content" when I try that.
I use one of the non Github mirrors that are linked in the readme, they are not https though.
Ah thanks, I'd missed those, github forcing TLS on raw files is the problem in the first place: https://github.com/2ndalpha/gasmask/issues/90#issuecomment-2...
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#246Earlier quoted context omitted.
We'll just outlaw that. Compare: Jaywalking, avenues.
"Machine kills human because human violated traffic law" will never fly.
From stories I've heard of how joggers and cyclists are treated sometimes in the US, I wouldn't be so sure.
It would have to be a child being killed.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#247The author is not subtle in letting know that this is intended to be open source replacement for Little Snitch (domain!). But at-least macOS has little snitch, closest for Linux was opensnitch which was announced on HN few months back - https://github.com/evilsocket/opensnitch/ but I'm not sure whether it's actively being developed though.
Douane[0] is another application firewall for Linux that's still active as far as I can tell.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#248Nowadays it's more important to control and restrict outgoing connections than incoming connections. Who would had thought of that 25 years ago.
I've been saying for a long time that one thing that companies can do to meaningfully increase their security is to NOT install default routes on most machines. Put in routes for your local networks and applications, set up a proxy server for any legitimate traffic that needs to "exit" the network (i.e., go to the Internet), and simply drop anything else.
Port 53 is still a major pita though.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#249Earlier quoted context omitted.
> In other words, it won't stop malicious Javascript running in your browser from making an outbound connection, which is the most common way for malware to do that. This might be possible, if you start off with deny-all as the default and then start manually adding exceptions as you browse.
Let me ask, seriously: if we take the Great Firewall of China, it does all sorts of packet inspection. Why can't this be applied to personal firewalls and inspect the traffic leaving (or coming in) for malicious content being masked as allowed traffic, etc? There was a company called Packeteer that did traffic shaping/inspection....could any concepts be applied to firewalling as they were to traffic prioritization?
for sure it could be done, however it is more complex and resource intensive. probably not good for laptops etc.
Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections
#250Earlier quoted context omitted.
Let me ask, seriously: if we take the Great Firewall of China, it does all sorts of packet inspection. Why can't this be applied to personal firewalls and inspect the traffic leaving (or coming in) for malicious content being masked as allowed traffic, etc? There was a company called Packeteer that did traffic shaping/inspection....could any concepts be applied to firewalling as they were to traffic prioritization?
for sure it could be done, however it is more complex and resource intensive. probably not good for laptops etc.
Can you share insight on how intensive of a task this is?