PacketHound is a free, open-source outbound firewall tool for Windows 10 and 11 that gives users control over which applications can connect to the internet. It changes Windows Firewall’s default for outgoing traffic to block connections without a rule, then prompts the user when an unfamiliar app tries to connect. The prompt identifies the app, publisher, destination and port; decisions can apply to the whole app or a specific IP address, host or domain, and can be permanent or last only until the app exits. Rules remain active even when PacketHound is closed because they are standard Windows Firewall rules.
To avoid a flood of prompts, the software quietly allows verified Windows components, while still asking about risky built-in tools such as PowerShell and curl. It provides searchable rules, a log of blocked attempts, temporary protection pauses and controls for restoring Windows Firewall settings. Important limitations include that an app’s first connection is blocked before the user can approve it, so some applications need to retry; installers may need to be run again after approval. Domain rules are implemented through IP addresses, so shared hosting can broaden their effect. PacketHound requires administrator rights and cannot manage connections if another security suite has replaced Windows Firewall; workplace Group Policy settings take precedence. It collects no usage data, though it performs server-name lookups and can check weekly for updates.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A covert Russian network used fake media posts to exploit French riots, spreading false claims about migrants and portraying the government as weak. French and EU assessments also found Israeli-linked and MAGA accounts pushing hostile narratives about the unrest. (reuters.com)
A Microsoft-signed boot shim can be reused to undermine Secure Boot protections on corporate computers. The research explains how Secure Boot validates trusted boot components and previews a practical technique for exploiting that trust. (leosmith.wtf)
ChatGPT Desktop forwards your local SSH agent to remote machines. Remote agents can use your SSH credentials to access private repositories and push code. (news.ycombinator.com)
Chinese surveillance technology is helping repressive African governments monitor citizens and suppress dissent. The systems give authorities tools to track critics and control public activity. (economist.com)
U.S. officials say Alice Huang, a Chinese businesswoman close to Nvidia CEO Jensen Huang, was recruited by China’s Ministry of State Security to gather intelligence on him and seek access to advanced AI chips. House committee leaders have requested a closed-door briefing from Jensen Huang about his interactions with her. (nytimes.com)
Security researchers found vulnerabilities in a major automaker’s connected-car systems while examining the infrastructure behind its remote-unlock app. An exposed admin tool and weaknesses in the platform enabled access to cars across much of the world. (shubs.io)
Today's best Hacker News stories, summarized and screenshotted, one email a day.