With all due respect to the geniuses behind this, the architecture of computers is fundamentally broken such that trusting any firewall that runs on the same machine that it's protecting cannot be trusted. This opens up the bigger open question about suitable pathways forward for revamping computer hardware architecture from a security-first perspective, which opens up questions about the flaws of the design of the internet itself.
Thusly, I will leave quietly, in recognition that the status quo is too entrenched for any visionary who has an intersect to share with humanity. Aloha and Farewell.
(ps: This comment is likely to be censored by hn.)
Yeah, I see that. My intention was "it's a macOS firewall (like little snitch)", not that it was "free and open source (like little snitch)". Apologies, but I can't edit the title anymore.
No worries. I didn't object to the title, so much as to the parent comment that suggested the original question was something that should have been obvious from the title, when it was not.
I threw a tiny amount of money at them via Patreon (IIRC).
BlockBlock is a thing like "Little Snitch for kernel extensions" -- if a process tries to install a kernel extension, it is blocked until you approve the action via an alert. It is in the process of being reworked for macOS Monterey, but I've used BlockBlock on macOS 10.11 up to Big Sur and it does the job.
11 comments
[ 5.8 ms ] story [ 39.2 ms ] threadThusly, I will leave quietly, in recognition that the status quo is too entrenched for any visionary who has an intersect to share with humanity. Aloha and Farewell.
(ps: This comment is likely to be censored by hn.)
I threw a tiny amount of money at them via Patreon (IIRC).
BlockBlock is a thing like "Little Snitch for kernel extensions" -- if a process tries to install a kernel extension, it is blocked until you approve the action via an alert. It is in the process of being reworked for macOS Monterey, but I've used BlockBlock on macOS 10.11 up to Big Sur and it does the job.