Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LittleSnitch for Linux

obdev.at

Post reply on HN
Print view View original

191–200 of 489 posts

Re: LittleSnitch for Linux

#191

Post by gus_ »

toredash wrote: post #142
sgc wrote: post #84

Earlier quoted context omitted.

I just tried littlesnitch and it did not resolve very many ips to domains, which is pretty basic. It also failed to identify most processes, and they were grouped under "Not Identified". It appears these are known limitations of the Linux version [1]. So for that alone I need to stick with opensnitch. [1] "Little Snitch for Linux is built for privacy, not security, and that distinction matters. The macOS version can…

Is there any DNS based software to do block/allow? Kinda lika what's present in CiliumNetworkPolicies in Kubernetes networking?

OpenSnitch (+ block lists) ;)

or DNS stubs with filtering capabilities.

Re: LittleSnitch for Linux

#192

Post by amonith »

riobard wrote: post #177

>> The macOS version uses deep packet inspection to do this more reliably. That's not an option here. I thought it would be easier to do DPI on Linux than macOS. No???

Yeah I thought that was one of the primary use cases of eBPF. Not an expert though, just read about some of these things.

Re: LittleSnitch for Linux

#193

Post by fsflover »

M95D wrote: post #179
fsflover wrote: post #176

Earlier quoted context omitted.

What else is this about? Debian repositories still contain no malware and if you install software exclusively from them, you'll be safe.

Does it contain Firefox? How about Chrome? Quote from LittleSnitch: > Little Snitch for Linux is built for privacy, not security What's your definion of malware in this context?

It contains Firefox and Chromium. You are right that they may call home, but at least it's very limited and easily configurable. Could be too much for you but fine with me. Also Debian does change their config by default to minimize privacy issues: https://news.ycombinator.com/item?id=32582260

Re: LittleSnitch for Linux

#194

Post by Perz1val »

cromka wrote: post #167

I know it sounds crazy at this point, but with popular YouTubers switching to Linux, gamers overall well-aware of Steam on Linux advantages and switching as well, plus popular software like LittleSnitch getting ported, 2026 can without irony be named as Year of Linux Desktop, right?

Also unrelated, but more linux gamers proves my personal observation that on the spectrum of computer literacy gamers are just below powerusers and programmers. We see more less technical people migrate over to Linux gradually and now it's gamers turn. Well, that's kind of obvious for everybody except Microsoft apparently.

Re: LittleSnitch for Linux

#195

Post by whilenot-dev »

supernes wrote: post #165

Tried it on Fedora 43 (6.19.11 x86_64) and it loaded all CPU cores, dumped 50K lines in the journal and failed to start. > Error: the BPF_PROG_LOAD syscall returned Argument list too long (os error 7). > littlesnitch.service: Consumed 3min 38.832s CPU time, 13.7G memory peak.

Someone already created an issue for it: https://github.com/obdev/littlesnitch-linux/issues/1

Re: LittleSnitch for Linux

#196

Post by S0und »

supernes wrote: post #165

Tried it on Fedora 43 (6.19.11 x86_64) and it loaded all CPU cores, dumped 50K lines in the journal and failed to start. > Error: the BPF_PROG_LOAD syscall returned Argument list too long (os error 7). > littlesnitch.service: Consumed 3min 38.832s CPU time, 13.7G memory peak.

I was looking for a comment like yours. Same issue, in my case only eating up half of my cores but with 100% utilization, webUI not working.

Re: LittleSnitch for Linux

#197

Post by jcgl »

xrio wrote: post #170

Back when I was still using macOS I loved Little Snitch and was a paying customer. And I agree nothing on Linux comes close. Would it be technically feasible to also provide this as a Flatpak to support immutable distros like Bazzite?

I’m not aware of flatpaks specifically having th capability to run system software, daemons, etc. Some other immutable packaging formats should be able to (systemd-sysext at least, and snap iirc).

Re: LittleSnitch for Linux

#198

Post by jcgl »

LoganDark wrote: post #96
TheTaytay wrote: post #95

I’ve been researching the “best” way to build a little outbound network proxy to replace credential placeholders with the real secrets. Since this is designed to secure agents workloads, I figured I might as well add some domain blocking, and other outbound network controls, so I’ve been looking for Little-snitch-like apps to build on. I’ve been surprised to find that there aren’t a ton of open source “filter and pot…

Something almost no firewalls get right is pausing connections (NOT rejecting them) until I've decided whether to allow or not. The only firewalls I've seen do this are Little Snitch for Mac, and Portmaster for Windows (before they made it adware / started locking existing local features behind the subscription).

OpenSnitch seems to do this just fine? Unless I’m misunderstanding your point. Connections seem to just block until I take an action on the dialog. Now, if an application itself has specified a short timeout (looking at you, NodeJS-based stuff), that obviously doesn’t help. But for most software it works great.

Re: LittleSnitch for Linux

#199

Post by npodbielski »

Doxin wrote: post #187
dainank wrote: post #175

Earlier quoted context omitted.

I think there is a lot of talk (and this is good), but very little action. Market share is still incredibly low for LNX. I believe only a small subset of people actually attempt the jump from WIN to LNX (since most just want to play their games and run their programs without hassle) and then quickly realize that its tougher than they anticipated and swiftly return to WIN.

5% on the steam survey though. The jump isn't quite as big from previous years as it seems as they did some corrections to the statistics this year, but 5% is nothing to sneeze at.

Exactly! Me personally in 2010 would never though about the time when one on every 20 gamers will be Linux user. That is huge IMHO.

Re: LittleSnitch for Linux

#200

Post by preisschild »

lordmoma wrote: post #46
colesantiago wrote: post #28

Earlier quoted context omitted.

It is free, no subscription at all and truly open source. As software should be.

how should maintainer make money?

open source / free software is not necessarily free as in free beer. You can sell GPL software.
Post reply on HN