A Little Snitch for Windows

(packethound.app)

94 points | by BadBoyBubby 8 hours ago ago

45 comments

  • Dwedit 6 hours ago ago

    Isn't this just ZoneAlarm?

    • doodlebugging 3 hours ago ago

      It reminds me more of the old Windows firewall/IPS/IDS called Sygate. It was ahead of its time. I think Zonealarm came after since that is what I replaced it with after Symantec(?) bought Sygate and rolled the best functions of Sygate into their Professional firewall for a premium price. Sygate was free or you could buy a permanent license for a one-time fee. It was the best personal protection products available for pcs running Windows up to WinXP.

      I had also tried a different firewall/privacy tool from a company in Canada I think called ZeroKnowledge. That was a great product that also allowed you fine-grained access to and control of all connections to/from your Windows pc. They had a product available for a short time but shut down suddenly. I think I read that they were bought out by another firewall company but can't remember which one. They may have been rolled into the Blackberry software line.

      Both of these were available in the 90's lead-up to the dot com bust if I remember right. Sygate became obsolete when support ended around the time WinXP faded. ZeroKnowledge disappeared much earlier. I may have old executables and installers somewhere on antique backups.

    • Kuraj 2 hours ago ago

      Personally I used Kerio Personal Firewall. I remember it being very good and while I didn't care about outbound connections much back then, I'm pretty sure it had a similar feature it was just off by default

    • Tarq0n 6 hours ago ago

      Is zonealarm still alive?

      Portmaster has been filling this role for me for the last couple years.

      • byteknight 4 hours ago ago

        Windows firewall control

        • LoganDark an hour ago ago

          This only prompts you after the connection has already been rejected, instead of holding it for approval like Little Snitch and Portmaster -- but I did have WFC installed on my Windows machines anyway, it's still useful.

      • LoganDark 5 hours ago ago

        I used Portmaster too until they started locking existing features behind paid subscription. And generally just pushing towards microtransactions in general. I vastly prefer buy once or buy per major version.

    • jeremycarter 6 hours ago ago

      It's a tvery similar concept and presentation

    • constantlm 6 hours ago ago

      or perhaps BlackICE

      • aand16 4 hours ago ago

        Wow haven't read that name since around 2000, gave me a weird feeling in my brain.

        Here's another one: F.O.S.I.

  • darksim905 2 hours ago ago

    With all the reverse engineering out there going on now, I really hope someone does the REA with BlackICE. I miss that software so much. If it works native and is high quality with the simplistic GUI of ZoneAlarm, I would be so happy.

  • codernews123 7 hours ago ago

    Good, older alternative (seems to be not this user friendly) is Malwarebytes Window Firewall Control.

    • aiiotnoodle 4 hours ago ago

      Just tried this and it has a learning mode which is what I was looking for.

      Thank you for the recommendation.

    • mlnj 2 hours ago ago

      Came here to see how many others there were. This is only way I can actually feel like I'm in control of using modern OS. Everything is telemetry this and analytics that.

  • s3p 6 hours ago ago

    Portmaster is my go-to

    Edit: and glasswire although portmaster is my favorite

    • eps 3 hours ago ago

      Glasswire royally f*cked all the goodwill by going subscription-only.

      Such unadulterated greed, it was painful to watch as it unfolded.

  • shrx 7 hours ago ago

    Another alternative is Simplewall: https://github.com/henrypp/simplewall

    • underlines 6 hours ago ago

      Which I use for years, and just because of lack of a better alternative (minimal, OSS) I actually quite "hate" it.:

      It has no rules, like "Allow a file with THIS name on THAT path", the biggest complain of every simplewall user is its biggest flaw and annoyance: It asks you a million times to allow or deny the "same" app, after its checksum changed. So all the Windows apps that auto update always pop up again and again.

      A coding agent autonomously compiling and testing an exe with network access is impossible. I have to turn off simplewall, because it would constantly block the executable after recompilation.

      • joering2 5 hours ago ago

        I'm a simplewall user and what you describing is not my biggest flaw or annoyance - I simply don't upgrade windows (why would calculator need updates??) and after clicking few denies, its get very quiet. Been this way for 2 years now on Win 11.

        • Dylan16807 an hour ago ago

          Personally I like getting the security updates even if I have a firewall.

          Even among simplewall users I bet the vast majority install OS updates regularly.

    • iagiagiag 5 hours ago ago

      I also easily recommend this one. And OpenSnitch on linux seems to be doing the same job, though the interface can be less friendly.

    • djfobbz 4 hours ago ago

      Simplewall is quite terrible, IMO. They still haven't fixed the painfully slow fuzzy search functionality for firewall rules.

  • hn_submit 6 hours ago ago

    People are conjuring up all kinds of apps slapped together by LLMs and actually have the gal to ask money for them?!

    • msdrigg 6 hours ago ago

      It’s free tho

      • hn_submit 5 hours ago ago

        They removed the "Pricing" menu item from the website.

    • voidfunc 5 hours ago ago

      Might as well make some money while you can.

    • AltruisticGapHN 3 hours ago ago

      So now we use AI for coding we can't sell any apps anymore?

      Like this guy pushed a button and everything just happened?

      What does it matter if it's mostly coded by an LLM. If someone skilled guided an LLM to build an app that does something meaningful and useful why shouldn't they be able to sell it or accept donations?

      • hn_submit an hour ago ago

        If there's no real skill involved and anyone could've built it then it's essentially worthless. Save for the cost of the tokens used perhaps.

        • alwa 17 minutes ago ago

          I mean—I can think of a whole lot of people whose jobs I could do, but who I’m happy to pay a little to avoid having to deal with it myself.

          It doesn’t take particularly sophisticated skill to load up your garbage and drive it to the landfill—and, frankly, it’s kind of fun every once in a while—but I certainly wouldn’t call municipal trash service worthless…

  • RecycledEle 3 hours ago ago

    Cool.

    It would be better if it suggested the consequences of stopping programs from phoning home, like will this program say the license check failed after 2 weeks, or will it keep working.

  • Kwpolska 7 hours ago ago

    I'd rather not use a security tool which is 100% vibeslop with a 100% vibeslop website.

  • baal80spam 7 hours ago ago

    How is this better and more comprehensive than Fort Firewall? https://github.com/tnodir/fort

  • Avicebron 6 hours ago ago

    I've been working on my own version of this for a little over a year. Sigh.

    • adzm 6 hours ago ago

      May I see it?

      • Avicebron 6 hours ago ago

        I'm looking for somewhere to put it anonymously, don't want to doxx myself.

  • poszlem 7 hours ago ago

    I beg you. At the very least, please, write your own headers. I don't even need you to write the whole copy on the page, but please, don't make us read that claudease slop. This makes the app you advertise look like the lowest of efforts, no matter what it is.

    "Know which apps are calling home." "Every connection, your call"

    • phendrenad2 7 hours ago ago

      Or better yet, make the aite itself open-source so people can contribute better writing.

    • iKlsR 6 hours ago ago

      I learnt recently these are called "staccato sentences" https://x.com/michael_chomsky/status/2107235505620521274. Update your agents.md

    • eviks 6 hours ago ago

      But then how would you know that the app is the lowest of efforts if the copy is better written?

  • avazhi 2 hours ago ago

    > Most firewalls only watch what comes in

    Uh, no they don't. I haven't used a firewall in 20 years that hasn't had both inbound and outbound monitoring lol.

  • devilsdata 6 hours ago ago

    slop