Live data from Hacker News

Little Snitch: Network Monitor and Application Firewall for macOS

obdev.at

81–90 of 118 posts

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#81

same functionality but without fancy graphic and map interface https://sniffnet.net/

How is this the same if it says it doesn't support process id?

Can it ask you on new connection by a specific app whether to allow it like little snitch does?

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#82
post #68
post #64

Earlier quoted context omitted.

I own many more devices than just a Mac. I have an iPhone, Apple TV, Linux box, Windows PC, Nintendo Switch, Quest 2, Kindle. I'd prefer one piece of software that covers all of them over different software for each of them.

This is unreasonable.

why? Isn't there some PI software or network router software I can use that will monitor all devices on my network and given me all the same info?

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#83
post #21

Firewalls and endpoint security are important, and Little Snitch is pretty good, but this feels like an ad being posted. It’s just a link to the main page of their website: nothing specific to warrant discussion.

And it's a very old and well known software..

I used it years ago but did not know they added all these features. I enjoyed seeing this post here

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#84

Little Snitch is one of the best pieces of software out there. It’s essential for every macOS user, works very well, and is a one-time payment. I truly hope it stays that way and doesn’t go down the same path as 1Password. I’m very grateful to the developers for creating such an excellent product. I wish more software were like this.

> It’s essential for every macOS user Is it? I'm interested in hearing why. I've been using macOS for ~15 years, so very familiar with Little Snitch. I think I owned a version many years ago but haven't for a long time. I don't really see what I'd use it for. I don't run dodgy software, I don't want to partially break the software I do run by nit picking what connections it can make as that wouldn't improve my experi…

>I don't want to partially break the software I do run by nit picking what connections it can make as that wouldn't improve my experience and would most likely cause issues.

Partially breaking web pages by blocking all connections to ad servers does wonders for my experience.

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#85

Earlier quoted context omitted.

> It’s essential for every macOS user Is it? I'm interested in hearing why. I've been using macOS for ~15 years, so very familiar with Little Snitch. I think I owned a version many years ago but haven't for a long time. I don't really see what I'd use it for. I don't run dodgy software, I don't want to partially break the software I do run by nit picking what connections it can make as that wouldn't improve my experi…

I caught a python ml library phoning home to a chinese server on a project that my company was building. My developer had no idea it was happening but I caught it first run thanks to lil snitch. If deployed this would've been a security escape that would need to be disclosed at a govt level. Also, Apple. Their junk phones home just about everything you do. 50+ services constantly pinging Cupertino.

What was the library?

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#86
post #82
post #68

Earlier quoted context omitted.

This is unreasonable.

why? Isn't there some PI software or network router software I can use that will monitor all devices on my network and given me all the same info?

1. Sufficiently advanced routers that have such functionality are expensive and generally complex to manage

2. The reason tools like Little Snitch are valuable is they instantly indicate that a connection was attempted, indicate which binary/app attempted it, and allow you to decide whether or not to allow the connection in realtime

Being able to associate a specific action you’re taking (e.g. clicking a button in a specific app) with a specific network request isn’t really feasible when the device keeping track is not the device you’re currently using.

It’s significantly harder to retroactively analyze connections once you’ve completely lost the context of what initiated the connection.

The only way to make a centralized device achieve the same thing is to institute a default-deny policy, but carefully allowing only the connections you want becomes tedious and quickly leads to just giving up for practical reasons.

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#87

Little Snitch is one of the best pieces of software out there. It’s essential for every macOS user, works very well, and is a one-time payment. I truly hope it stays that way and doesn’t go down the same path as 1Password. I’m very grateful to the developers for creating such an excellent product. I wish more software were like this.

> It’s essential for every macOS user Is it? I'm interested in hearing why. I've been using macOS for ~15 years, so very familiar with Little Snitch. I think I owned a version many years ago but haven't for a long time. I don't really see what I'd use it for. I don't run dodgy software, I don't want to partially break the software I do run by nit picking what connections it can make as that wouldn't improve my experi…

> I don't run dodgy software

I was confident I didn't either, but Little Snitch has proven otherwise. The amount of 'instrumentation' in modern JS and Python libraries is insane.

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#88
post #64

Little Snitch is one of the best pieces of software out there. It’s essential for every macOS user, works very well, and is a one-time payment. I truly hope it stays that way and doesn’t go down the same path as 1Password. I’m very grateful to the developers for creating such an excellent product. I wish more software were like this.

I own many more devices than just a Mac. I have an iPhone, Apple TV, Linux box, Windows PC, Nintendo Switch, Quest 2, Kindle. I'd prefer one piece of software that covers all of them over different software for each of them.

Little Snitch and similar programs let you manage connections per application.

You can’t do that outside of the device.

Re: Little Snitch: Network Monitor and Application Firewall for macOS

#89
post #59

For those looking for a good, free firewall for macOS, consider LuLu. https://objective-see.org/products/lulu.html

Doesn't macOS also have a built in (but disabled by default) Firewall? Why does nobody use that?

As others have indicated, LuLu (like Little Snitch) notifies you when your machine is initiating an outbound connection and lets you grant or deny permission, and to set up a persistent rule for that app/connection.
Post reply on HN