Hacker News Reader

I've set this up once. It is a mammoth and ongoing effort to tune it for your org. Ended up dropping it for all but the most locked down machines.

View on HN

Can you say how the setup compares to Little Snitch, for example?

That is like comparing apples to oranges.

> That is like comparing apples to oranges.

That doesn't seem like helpful reply.

I was asking about the time/complexity/difficulty of setup. It can be somewhat painful to setup and train Little Snitch, but it's ok after that.

Little Snitch seems to be a consumer-focused product while Santa is more for org-wide policy management, although I didn't check if LS had a business product available.

Is it just application whitelisting / blacklisting basically? Sounds like Applocker which is used extensively and not THAT much work to really tune. Bit of upfront work and then its pretty smooth sailing from there - especially of course if you just run it in the monitoring mode without any enforcements.

Reply on news.ycombinator.com