Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Little Snitch Mini

obdev.at

Post reply on HN
Print view View original

171–180 of 276 posts

Re: Little Snitch Mini

#171

Post by kalleboo »

ary wrote: post #32
dmix wrote: post #29

Earlier quoted context omitted.

I've always thought this should be a feature in an OS for advanced users. Combined with some OS level security optimizations it could be quite a powerful security feature for the paranoid and at-risk. I haven't tried mini but there's probably plenty of UX gains in between the standard Little Snitch fine control approach and the UBlock Origin style community curated defaults where control/customization is optional/on-…

Completely agree. Occasionally I run Charles Proxy[1] on my iPhone to analyze network activity and am disturbed by what I see. Software shouldn't be able to open arbitrary network connections without user consent/control, but we're not there yet to a large enough degree on mobile unfortunately. [1] https://www.charlesproxy.com/documentation/ios/

Starting in iOS 15.2 you can turn on the App Privacy Report to log which domains each app on your phone connects to https://support.apple.com/en-us/HT212958

It would be nice for them to add a block option in there as well

Re: Little Snitch Mini

#172

Post by minusf »

Terretta wrote: post #132

"The full feature set, including connection blocking, extended traffic history time ranges, advanced display and filtering options and more is available as an in-app purchase." So this means as a company using MDM, I cannot purchase it for all my employees. MacOS devs who see IAP and subscriptions as the only purchase paths are leaving corporate purchases on the table. We choose software we can pay for. We are fine i…

is the non-mini version also not acceptable? that's what i use and it has no iap.

Re: Little Snitch Mini

#174

Post by mrzool »

Terretta wrote: post #132

"The full feature set, including connection blocking, extended traffic history time ranges, advanced display and filtering options and more is available as an in-app purchase." So this means as a company using MDM, I cannot purchase it for all my employees. MacOS devs who see IAP and subscriptions as the only purchase paths are leaving corporate purchases on the table. We choose software we can pay for. We are fine i…

I have the same exact same issue. Managed Apple IDs are a joke, the only use I have for them is to backup the contacts of my users so that when they get a new device they get their email autocompletion back. Keychain sync is disabled. Using the App Store in any capacity is impossible. There's absolutely no way to use in-app purchases/subscriptions. I got almost laughed at by an Apple rep the other day when I asked if it was somehow possible, as an Apple Business administrator, to purchase extra iCloud storage space for a user.

This is a great article to send to those developers that only use IAP to license the complete version of their apps:

https://blog.kandji.io/in-app-purchases-for-enterprise-buyer...

Re: Little Snitch Mini

#175

Post by manuelmoreale »

lockhouse wrote: post #108
latexr wrote: post #101

Earlier quoted context omitted.

Please let’s stop comparing software subscriptions to coffee. It misses the point about the recurring cost and lock in, and not everyone lives in the USA and pays high prices for coffee every day (or ever). https://news.ycombinator.com/item?id=32738791

I don't like subscriptions either, but what is the sustainable alternative income source for app developers?

Honest question, and I'm asking because I want to know your take, not because I'm trying to be a dick: why should an app developer have a sustainable income stream from a single app no matter what?

Isn't it possible that an app is simple enough that doesn't justify getting a full salary out of it?

Again, I'm not trying to be a dick here, I'm just trying to figure out what is the reasoning behind the subscription model.

I'm a freelance web developer. When I'm done with a project I have to move to something else. Is it unreasonable to expect app developers to do the same?

And I know, not all apps are created equal, some apps require constant work. I get that. For some apps is reasonable to expect a subscription. But for all apps? I'd say no.

And this developer, from what I can see, is doing the "right thing" by working on multiple products. Which is great.

Re: Little Snitch Mini

#176

Post by wkat4242 »

mrzool wrote: post #174
Terretta wrote: post #132

"The full feature set, including connection blocking, extended traffic history time ranges, advanced display and filtering options and more is available as an in-app purchase." So this means as a company using MDM, I cannot purchase it for all my employees. MacOS devs who see IAP and subscriptions as the only purchase paths are leaving corporate purchases on the table. We choose software we can pay for. We are fine i…

I have the same exact same issue. Managed Apple IDs are a joke, the only use I have for them is to backup the contacts of my users so that when they get a new device they get their email autocompletion back. Keychain sync is disabled. Using the App Store in any capacity is impossible. There's absolutely no way to use in-app purchases/subscriptions. I got almost laughed at by an Apple rep the other day when I asked if…

Yeah managed Apple IDs don't work for most enterprises as they require the email and UPN to be the same. In our configuration this is different for a very good reason. We're not going to change 200.000 users just because Apple doesn't support something.

Also manually resolving duplicate accounts at this scale is impossible.

Managed Apple IDs were a nice idea but the implementation sucks. I was hoping they'd fix them after release but it's been like 4 years now and it hasn't happened.

Re: Little Snitch Mini

#177

Post by amelius »

kibwen wrote: post #40
amelius wrote: post #35

So, from a user's viewpoint, if your app talks to blah.serv.direct.data.com how do you know whether it actually needs that server for its main functionality or not? I don't see how this snitch tool will not just generate a lot of noise.

Block the request and see what breaks.

The problem is that you have to do it for tens to hundreds of addresses. And they may change too. It's a lot of manual work.

Re: Little Snitch Mini

#180

Post by jachee »

bartkappenburg wrote: post #178

Love this tool! I upgraded to premium so that I could see which apps are the most chattiest... it turns out to be Tailscale. It connects to a lot of random places across the whole(!) world. See: https://imgur.com/a/Gc5pnih Any reason for this behaviour?

My semi-educated guess is verifying server status to know which endpoints are available.
Post reply on HN