Hacker News new | ask | show | jobs
by littlesnitch 72 days ago
The eBPF filter in Linux Snitch decides immediately, so no TCP handshake leaks. But, as a consequence, we cannot inspect packet headers to verify the remote name and it's easier to trick it to show a false name. Little Snitch for Linux is not a security tool.
1 comments

>Little Snitch for Linux is not a security tool.

What is it, then?