Reply to thread

Message

<blockquote data-quote="Kokopelli" data-source="post: 109771">An app does not need root access to call out.&nbsp; Root access is mostly required if you want to set up a service in the privileged port range (under 1024).&nbsp; So apps can, and frequently do, &quot;call home&quot; usually to check for updates.&nbsp; If you are worried about that the easy solution is to use Little Snitch.&nbsp; I don't bother personally since I monitor what apps are running and follow the &quot;you have to trust someone sometime&quot; school of thought. If I started noticing an excess of network traffic I would probably add a log to outward requests for a few days though.What I am more worried about would be something like SSH.&nbsp; If someone were lucky enough to guess my account password they could effectively destroy my Mac.&nbsp; A fate that could have been avoided by simply blocking all but a few addresses access to port 22 (SSH).&nbsp; Unfortunately you can't do it with the default implementation.</blockquote>

[QUOTE="Kokopelli, post: 109771"] An app does not need root access to call out. Root access is mostly required if you want to set up a service in the privileged port range (under 1024). So apps can, and frequently do, "call home" usually to check for updates. If you are worried about that the easy solution is to use Little Snitch. I don't bother personally since I monitor what apps are running and follow the "you have to trust someone sometime" school of thought. If I started noticing an excess of network traffic I would probably add a log to outward requests for a few days though. What I am more worried about would be something like SSH. If someone were lucky enough to guess my account password they could effectively destroy my Mac. A fate that could have been avoided by simply blocking all but a few addresses access to port 22 (SSH). Unfortunately you can't do it with the default implementation. [/QUOTE]

Verification

Name this item. 🍎