Hacker News: Jakson_Tatehttps://news.ycombinator.com/user?id=Jakson_TateHacker News RSShttps://hnrss.org/hnrss v2.1.1Fri, 17 Apr 2026 00:30:51 +0000<![CDATA[New comment by Jakson_Tate in "LittleSnitch for Linux"]]>gotcha... makes total sense. LRU for the DNS map is definitely the right call for a desktop setup. and falling back to the user's default policy is smart so you don't randomly brick their internet if an app goes crazy.

really appreciate the honest answer, man. awesome work on this...!

]]>Fri, 10 Apr 2026 03:37:39 +0000https://news.ycombinator.com/item?id=47713310Jakson_Tatehttps://news.ycombinator.com/item?id=47713310https://news.ycombinator.com/item?id=47713310<![CDATA[New comment by Jakson_Tate in "LittleSnitch for Linux"]]>cool to see eBPF used for a desktop firewall instead of just ddos packet dropping. the note about bpf map overflows is super relatable, dealing with that on bare-metal is a pain.

my question is... if the tracking maps fill up completely, does the daemon fail-open or fail-closed?

]]>Thu, 09 Apr 2026 10:49:47 +0000https://news.ycombinator.com/item?id=47701954Jakson_Tatehttps://news.ycombinator.com/item?id=47701954https://news.ycombinator.com/item?id=47701954