Comment Application Firewall (Score 1) 53
Okay, so...
Back in the day, on Windows... 98 through to about 7? I used to use ZoneAlarm on my Windows machines.
Was that because we didn't have a network firewall at home? No. We did. In fact, I used to do quite a bit with Freesco (a single-floppy Linux router distro, designed to replace Cisco routers with commodity PCs). Our networking was DAMN good for a home network.
But I liked to use it because it would POP UP and tell you something was using the Internet. What port. To what domain/IP. That it wanted to listen on a port rather than send data? Allow or Deny? What kind of software profile to apply to this? Is this a game (i.e. some random outgoing stuff only)? Is this a web browser (let it do what it likes on 80/443)? Etc. To what zone? Internet? Local Network? etc.
That, I find, is the ONE THING that's still actively missing from all modern operating systems. I want that on my phone. I want that on my Windows PCs (Windows Defender doesn't even come CLOSE). I want that on my Linux PCs (but less of an issue there, for sure, and it's more difficult because they don't necessarily have a GUI by default).
A decent application firewall is severely lacking in modern machines, and part of that is the "UAC fatigue" that Microsoft introduced, where you got a dialog asking you inane questions about deep-level technical stuff. But I *want that*. The closest I've found is Comodo Free, which does the same. And you would be AMAZED how many programmes automatically do a DNS lookup and check-home as their very first action on a modern Windows machine. Basically EVERY piece of software you use. Every game. Every application. Every part of Windows. Every service.
And it's mostly unnecessary.
I would give my right arm for a decent GUI version of this, especially now that I'm entirely Linux again after 20+ years. Not because I expect it to defend me against attacks like a software firewall is sold as doing. But because I want to know why, in the ever living fuck, every tiny application thinks it has to immediately connect out to the Internet on random ports to talk-home in order to operate. So I can eliminate that feature / software.
Honestly... if there ever is a world war, the Internet will be the first thing under attack. And you'll realise - as I did even many years ago, how much stuff just jams up if it can't immediately DNS-lookup and connect out of your network. And how some stuff just then immediately stops working when you deny it, as in the programme just stops loading completely until you allow it.