On Wednesday, February 01, 2006, at 03:56PM, Tom R. no spam <[EMAIL PROTECTED]> 
wrote:

>One thing to try, when the LS alert comes up, is to
>(i) click on some LS button, like the "once" button
>(but don't click the "Allow Once" button yet), which I
>believe will keep the LS alert from timing out, (ii)
>move the LS window out of the way, (iii) start up
>Activity Monitor, showing processes threaded, to see
>what the curl process is a child of, ie what program
>wants to use curl.

Something else that occured to me just now is that the lsof command could also 
be good for this.
Executing "lsof -c curl" will list the files (caution, this can include 
libraries and sockets) that are in use by curl.  This could help identify 
what's going on.

>Re requesting good vs bad, be clear that what you're
>asking for is opinions from people who might not be
>trustworthy, so then what you have to do is try to get
>enough opinions for you to be able to make up your own
>mind.

True, it'd be like the Wikipaedia.  Virus writers could easily spam the 
database.  Over time however, reports should be able to identify suspicious 
behavior and overwhelm spammed entries.

It'd be interesting to see this integrated with LS.  An extra button in the LS 
dialog to "Report the connection attempt to the ObDev database".  This would 
send in the connection data as well as an optional comment.

--                                                 --
arno  s  hautala         /-\           [EMAIL PROTECTED]
--                                                 --
_______________________________________________
Littlesnitch-talk mailing list
[email protected]
http://at.obdev.at/mailman/listinfo/littlesnitch-talk

Reply via email to