TLDR Tech / InfoSec
Little Snitch for Linux
Objective Development launched a Linux port of the popular macOS egress firewall, using an eBPF kernel program to intercept outgoing connections and surface per-process traffic visibility via a local web UI with blocklist and custom rule support. The tool targets privacy monitoring over adversarial hardening as eBPF's storage and complexity constraints mean packet-to-process attribution under heavy traffic relies on heuristics, and hostname-to-IP mapping lacks the deep packet inspection accuracy of the macOS version. The eBPF program and web UI are GPL-2.0 with source on GitHub. The daemon is proprietary but free to use, and requires kernel 6.12–6.19.0 with BTF support.
Read the full story