Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

91–100 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#92

Earlier quoted context omitted.

Give it another 25, and you will have to pay a premium for things which are stand-alone, disconnected from the net. Want a car which is not navigating using cloud AI? Only the rich can afford that...

I really have no problem with sharing my information openly in cases my presence has an obvious effect on those around me. Letting other cars within a certain radius know where I am seems a reasonable sharing of my information. I would go as far as sharing my intended destination so that some "cloud" some where can better plot my route to minimize traffic for me and others. That said, storing all that information for…

I think the difference is consensual sharing of the information. Many would probably be OK with certain types of information collection, but the way some things are collected without overt notice or consent (Example: Wi-Fi SSID to GPS long/lat pairings on phones) is understandably concerning to some.

> If someone can devise a way for me to share my information while controlling how that information can be used later, it would go a long way to striking the right balance. I guess that's more or less "personal DRM" for our information.

It would not be easy to do this in a technical manner, as it could be defeated (as with most DRM). It sounds like a legislative solution would be best.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#93

What's the CPU usage? I tried Little Snitch, but it was often consuming insane amounts of CPU (40%+) which matters a lot on a 12' Macbook on battery, so I uninstalled it.

My "Little Snitch *" processes have used a total of 10 minutes of CPU time since my last reboot. I'd ask their support about this.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#94
post #52

Unfortunately, this still has the key flaw that has plagued outbound firewalls since their invention: "Currently, LuLu only supports rules at the 'process level', meaning a process (or application) is either allowed to connect to the network or not. As is the case with other firewalls, this also means that if a legitimate (allowed) process is abused by malicious code to perform network actions, this will be allowed."…

> In other words, it won't stop malicious Javascript running in your browser from making an outbound connection, which is the most common way for malware to do that.

This might be possible, if you start off with deny-all as the default and then start manually adding exceptions as you browse.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#95
post #86
post #54

Unless I'm mistaken, this isn't actually open source, as it's under a non-commercial clause. edit: there is an open issue about it: https://github.com/objective-see/LuLu/issues/4

1. The OSI tried to get a trademark for “open source” in their early days and failed.[1] They don’t own the term, and arguing fine distinctions like this does nothing but promote flame wars.[2] 2. The developer put a lot of effort into this and was generous enough to make this available for free with the source code open. Please be gracious, because belligerent feedback like this is what causes people to sometimes re…

1. Whether or not the OSI has a trademark doesn't seem relevant to me, they coined a term which wasn't used before and associated it with a well known definition. The distinction seems more significant than fine to me and causes confusion about what kind of license I (and others, as evidenced by the open issue on the subject) expect the software to be under. That a subject is source of disagreement is certainly not a valid reason not to discuss it.

2. I'm very aware of the efforts of free or open source software authors and I'm grateful for them. In fact, I occasionally take time to thank them and make donations to them (although I should do it more). This doesn't mean that inaccurate statements should not be corrected and I don't see anything `belligerent` about reporting them, as would be the case for reporting a bug.

3. You're right on this, I wrongfully assumed one of the person answering in the issue was the author. I changed my comment.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#96

Earlier quoted context omitted.

Well I'm assuming things like this helps: We do not share nor sell your data. https://www.obdev.at/privacy-policy.html However you may be referring to the same notion that nothing stops someone from murdering someone else.

Until the company is acquired. And then the disclaimer disappears silently.

Which... has never happened with the company behind Little Snitch.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#100
post #75

Dumb question: is something about OS X’s built in firewall that’s insufficient? Always love new projects like this, just curious though.

In the FAQ, bottom of page: > Do I need LuLu if I've turned on the built-in macOS firewall? > Yes! Apple's built-in firewall only blocks incoming connections. LuLu is designed to detect and block outgoing connections, such as those generated by malware when the malware attempts to connect to it's command & control server for tasking, or exfiltrates data.

Thanks!
Post reply on HN