tiny-snitch

another comment here rightly pointed out that what we want is to protect our files from being read by unrelated processes. there are no good implementations of this yet to my knowledge. encrypted fuse with snitch like rules and prompts is probably the play. any network snitch program would have caught this and prevented exfill. a prompt would have been displayed for a new connection to sketchy.io udp 53. from pytorch or some child process. most eyebrows would rise. many requests would be denied. on mac you have little snitch and at least one foss alternative. on linux you have opensnitch, or can roll your own on libnetfilter_queue[1] or lsm hooks[2]. hopefully soon somebody implements encrypted fuse snitch. until and even after then, wrap yourself in network snitch safety blankets and feel warm and cozy. 1. https://github.com/nathants/tin