Hacker News new | past | comments | ask | show | jobs | submit login

Little Snitch definitely needs a social feature where you can crowdsource good rules from other people and see what rules are common within the communities for certain apps.



While the social part is not there, the technology is.

I subscribe to rule groups through hostblocker.app, which pulls HOSTS files from different known websites and compile them into a .lsrules file which Little Snitch can use.

While I cannot vouch for the website's underlying code-I did not write it and I can not find an open source implementation-It only provides rules and I can edit any rule group to my liking after subscribing to it.


That would introduce a major attack vector. One bad actor could introduce a rule that allows their malware to work.


No, as long as it is just outgoing ones or only blocking ones. Most people do not have any filtering of outgoing traffic.


I think you misunderstand the purpose of Little Snitch. The entire product is to warn you about outgoing connections. One of the use cases of that is seeing if a random app is connecting to an unknown host.

If you allowed crowdsourced rules, someone could sneak in a rule that says to allow their random app to connect to a random host, which is how malware exfiltrates your private data.


TIL. Thanks. Yes, for whitelisting it does not work.


Back when I was using OSX and Little Snitch, first user experience was horrible. I reinstalled OSX and installed Little Snitch first, and went to install app by app after running it, and got a slightly better experience. But, requires a reinstall of your OS (or maybe creating a new user will be enough)


little snitch supports blocklists ublock origin supports. it's a bit obscure feature but easy to setup.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: