TIL about this open source tool that helps you see what connections app make and block them if they're sus.

github.com/evilsocket/opensnit

@mauve Even with such tool, you have absolutely no warranty that a covert stack, operating in supervisor, or directly within the south bridge SoC handling many peripherals, including the default ethernet controller, with an hidden Linux RTOS, is not sending or receiving stuff without the main CPU / OS knowledge. Still it's better than nothing.

Cc @theruran @50htz @vidak @kkarhan @forthy42

Follow

@stman @theruran @50htz @vidak @kkarhan @forthy42 yeah my threat model is more along crapware and lazily added ads/analytics rather than advanced persistant threats and malware.

@mauve @stman @theruran @50htz @vidak @forthy42 So yeah, your software method may work fine for that...

The transparent analysis option works for stuff that may not get caught easily or systems where you can't shove in adblockers...

Sign in to participate in the conversation
Mauvestodon

Escape ship from centralized social media run by Mauve.