Little Snitch comes to Linux, but the core logic is closed source

(the.unknown-universe.co.uk)

39 points | by TheIPW 4 hours ago ago

10 comments

  • kelsey98765431 8 minutes ago

    last thing in the world i want is to install proprietary software on linux. even less so is something meant to be security software and interacting directly with my network stack.

  • roscas 2 hours ago

    Glad you also talk about OpenSnitch. It is critical to have it installed.

    OpenSnitch and PiHole are simply a must on every network.

    • klueinc an hour ago

      for folks on the mac, Lulu has been a great option too. https://github.com/objective-see/LuLu

      • Barbing 2 minutes ago

        objective-see is carrying an immense weight for Mac users

        Security: BlockBlock, KnockKnock, RansomWhere...

        System/Productivity: TaskExplorer...

        Yes times 4

    • benf76 an hour ago

      Can you elaborate on ideal pairing?

  • lapcat 2 hours ago

    See "Little Snitch for Linux" https://news.ycombinator.com/item?id=47697870

    Also:

    > Little Snitch is not there to replace OpenSnitch. It's just an additional option you can choose from. Some people might prefer it, others not.

    https://news.ycombinator.com/item?id=47701918

    > But I currently can't make the entire project Open Source. My other option would be to keep it completely private (wrote it mostly for myself in the first place).

    > I think it's still better to make it public and only partially Open Source so that some people can benefit from it. If you don't trust us, that's completely reasonable, just don't install it.

    https://news.ycombinator.com/item?id=47701740

  • melon_tusk 39 minutes ago

    How anyone could trust OpenSnitch is beyond me.

  • knowaveragejoe an hour ago

    One nice thing about LittleSnitch on linux is that it comes with a web UI by default. Is there anything like that for headless systems using OpenSnitch?

    • TheIPW 23 minutes ago

      I get the appeal; the Little Snitch UI is undeniably shiny. But for the headless Linux nodes in my Proxmox setup, I’ve never really felt the need for a proprietary dashboard just to see my network state. I’d much rather export my logs to something like Grafana or just check my AdGuard dashboard at the edge. It feels more "Linux" to keep the tools transparent and open than to invite a mystery binary onto my system just for the sake of a pretty graph.