Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
It's for catching any app, not just malware, making a lot of unexpected outbound connections and potentially blocking them. It's not just malware, but these days many "free" apps and services will phone home in ways users may be uncomfortable with.

The downside is this app will only report such things on the Mac where it's installed, not on the whole network. It's far more advanced and involved to set up, but PiHole is a better tool for monitoring an entire network like this.
Thumbs for pi-hole. Pi-hole blocks most ads and makes websites run faster because most of the ad bid links are dead and never executed. My pi-hole server shows it blocked 50% of the link attempts in October. Pages just fly when you do this!
 
I wonder if the frequent connection attempts were because you were blocking the connection with Little Snitch?

I have seen people post about similar results using PiHole. I saw a report of a Vizio smart TV that was blocked with PiHole and PiHole showed 800 hits an hour. Once the connection was allowed by PiHole the person reported they used some sort of sniffer on the router and it showed the Vizio TV only making one phone home connection an hour.

So I'm wondering if the same thing is happening in your case. So Spotify sees it cannot phone home so starts repeatedly trying to connect over and over again.
For me, I find it less of an issue of general repeated connections, and more of an issue where those connections are specifically going to. Many, many apps report your usage to analytics companies that track your usage. Many apps also connect to Facebook, even if you're not logged in via Facebook and should have no ties to Facebook. LS helps with blocking whole machine connections to these social and/or analytics sites.

Anyone who downloaded Lockdown for iOS and uses the pre-installed filters on that app, would also appreciate Little Snitch.
 
  • Like
Reactions: DCIFRTHS
I wonder if the frequent connection attempts were because you were blocking the connection with Little Snitch?

I have seen people post about similar results using PiHole. I saw a report of a Vizio smart TV that was blocked with PiHole and PiHole showed 800 hits an hour. Once the connection was allowed by PiHole the person reported they used some sort of sniffer on the router and it showed the Vizio TV only making one phone home connection an hour.

So I'm wondering if the same thing is happening in your case. So Spotify sees it cannot phone home so starts repeatedly trying to connect over and over again.
It's possible. There were .ru sites and a bunch of sites for what appeared to be pictures and a lot of strange things. I don't remember any repeating. I don't think I let it even get to fully operational. I remember things like "spotify.com" being kinda far down the list. :)
 
  • Like
Reactions: Weaselboy
No word on Apple Silicon support? hmmm.
At this point, "no one" can make claim to AS support. No products exist outside of the Developer Transition Kit, which will not be a release machine in its present form. Xcode 12.2 is also required to build such apps, and is itself in beta. When Big Sur, and particularly Xcode12.2 go to GM, we're likely to see a lot of AS-support announcements in a hurry. :)
 
  • Like
Reactions: mcdawg
A security researcher recently warned that starting with macOS Big Sur it is no longer possible to filter internet connections for system provided services.
 
  • Like
Reactions: AndiG
It's for catching any app, not just malware, making a lot of unexpected outbound connections and potentially blocking them. It's not just malware, but these days many "free" apps and services will phone home in ways users may be uncomfortable with.

The downside is this app will only report such things on the Mac where it's installed, not on the whole network. It's far more advanced and involved to set up, but PiHole is a better tool for monitoring an entire network like this.
Unless you use Internet Sharing to turn your Mac into a home router :)
I used to do that. It works ok, but it's not very fast or energy-efficient.
 
Try this exercise: Install Little Snitch. After you have finished allowing or disallowing all of the connections it will find install, or try to install, Spotify. You will be shocked and amazed at all of the connections your computer is making behind your back. I never joined Spotify thanks to Little Snitch. I think it was up to a dozen or more connections that just the installer, or first run of the app, wanted to make before I said enough is enough. It was nuts...just to play music?
Everything I install will make tons of connections. How does it help me to know that? I used Little Snitch back in 2010, and even then I couldn't make use of it, but I understand there are gurus. Or maybe the newer one has analytics capabilities that can tell me whether something is really wrong.
 
Broad strokes, there is a difference but the end result is the same to most users.

PiHole isn't for just blocking ads, though it can do that. It's also a good reporting tool that monitors all outgoing connections / requests from your home network, letting you block certain ones if you want. It just so happens that most folks end up using it to block all outgoing requests for ads. But another common use, for example, is blocking smartTVs from phoning home.

The issue with LS is it's limited to just the Mac it's running on, but when it comes to phoning home and superfluous outgoing connections, IoT devices tend to be the biggest culprits (smart cameras, smart thermostats, smart TVs, smart assistants), along with freemium apps. LS cannot do anything to help you with those, you need a robust router-side rules, or a DNS approach such as PiHole to manage those things.
If I understand correctly, PiHole is only a DNS server, maybe also a DHCP server. It's not a gateway to the Internet intercepting packets, just pointing DNS results of advertisers to something bogus for those who ask it.

Since so many things rely on DNS lookup, you can reliably trick them into not phoning home with just a PiHole. But who knows, they may fall back to a hardcoded DNS server when they can't reach what they want.
 
  • Like
Reactions: Brian33 and brand
If I understand correctly, PiHole is only a DNS server, maybe also a DHCP server. It's not a gateway to the Internet intercepting packets, just pointing DNS results of advertisers to 0.0.0.0 for those who ask it.

Since so many things rely on DNS lookup, you can practically block them from phoning home with just a PiHole.

Yea, hence I said broad strokes. I understand the the underlying means and technology are different, but the ends are the same: monitoring, reporting, and offering to block various outgoing connections. Different means, same ends.
 
Yea, hence I said broad strokes. I understand the the underlying means and technology are different, but the ends are the same: monitoring, reporting, and offering to block various outgoing connections. Different means, same ends.
Sorry, I edited. Practically speaking, only issue is I don't know how many devices have a hardcoded DNS fallback. Would be very improper, but I've seen worse.
 
Sorry, I edited. Practically speaking, only issue is I don't know how many devices have a hardcoded DNS fallback. Would be very improper, but I've seen worse.

From reading the pihole subreddit, my understanding is that having a hard-coded DNS is very uncommon (though it does happen). More often some devices will have an IP address coded into the software that they phone home to, bypassing DNS altogether, rather than relying on resolving domains.
 
  • Like
Reactions: hot-gril
I'm a little disappointed with the upgrade pricing this time around. I know this is the usual upgrade price as I've been using LS since the 1st version. However, a new macOS upgrade doesn't usually 'require' an upgrade to the latest version of LS and I can usually run the older version of LS until I am ready to upgrade. On this occasion, that's not possible and an upgrade of LS is absolutely required, to run on macOS 11. With this in mind I was hoping that Objective Dev would give a better price for the upgrade this time, sub €15. Money is so tight since lockdown started due to issues with work that I can't even afford the upgrade to LS 5, so I guess I'll have to stop using it for a few months until I get back to work 🙁. Bloody Covid!
 
I'm a little disappointed with the upgrade pricing this time around. I know this is the usual upgrade price as I've been using LS since the 1st version. However, a new macOS upgrade doesn't usually 'require' an upgrade to the latest version of LS and I can usually run the older version of LS until I am ready to upgrade. On this occasion, that's not possible and an upgrade of LS is absolutely required, to run on macOS 11. With this in mind I was hoping that Objective Dev would give a better price for the upgrade this time, sub €15. Money is so tight since lockdown started due to issues with work that I can't even afford the upgrade to LS 5, so I guess I'll have to stop using it for a few months until I get back to work 🙁. Bloody Covid!
That's true, my only thing is, even when I buy a 5 seat license, I get a discount, and I'll still be paying $89.

The only thing is, that's like every time macOS comes out, it's costing me $20, per mac!

I remember the days when macOS was $20!!

They aren't building macOS or doing as much work as Apple, geesh!

I mean $50 for a 5 seat half off upgrade would be reasonable... damn!

Laters...
 
Now this is a developer who got it all right. Taking full advantage of their Apple Developer account and being able to ensure that their software works when the release hits.
Also nice how they always offer loyal customers discounts to new major releases. And they are not the ones who charge with each new macOS release.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.