nbagent process, what is it?

simweb wrote:

The ONLY REAL waste of time in this thread

is reading your posts Linc Davis!

So much knowledge, so little use for it.

Hello, I find Little Snitch very useful for my scenario: I tether my MacBook Pro to my iPad. I have a profile in Little Snitch for tethering, and it prevents things like software update from happening while I'm tethered to my iPad. A saviour for my scenario, simplifies things a lot. I have a profile for home, and it allows all software updates automatically.

Mat

Actually, Little Snitch saved me from the Flashback trojan. A blog I visited redirected me to a bogus site with the trojan; at the time, I didn't know what it was, but later I recognized the URL as a Flashback infection site. My Mac did not test positive for Flashback later, however. Why not? Because I was running Little Snitch, wanting to know who my software is reporting to and controlling what traffic I see. Similar reason to why I run browser extensions like Do Not Track Me.

The variant of Flashback I encountered self-destructed when it saw I ran Snitch, for good reason: hackers don't want anyone to catch on to what they're doing. If you run Snitch, then there's a good chance that you'll see the traffic, catch on, and blow the whistle. Ergo the self-destruct.

Yes, Snitch has a barrage of notifications you must sort out for the first few weeks. Once you are beyond that, however, you control what traffic is allowed and what is not, and any new notification is an alert that something new is happening. In short, yeah, it's troubling to be alert to invasions of privacy and dangers inherent to the net. But it's often worth the trouble. It's saved me a lot of pain so far.

Linc Davis wrote:

This discussion is proof of the fact that "Little Snitch" is time-wasting rubbish.I have seen hundreds and maybe thousands like it, but I've never once heard of "Little Snitch" doing anything useful for anyone. If you install software that you don't trust, you have problems that it's not going to solve.

The point of security software is not to catch software you install.

The point of security software is to catch software you did not install.

Macs often run forever without getting infected by malware, but that is not Little Snitch's fault.

Where does the information that explains any of this start. I am more confused now then before. Instead of talking down to people pretend they are not experts (which is the purpose of this forum) not everyone understands technobabble

Rachael

Old thread, I know, but I just had to say this: You're saying that Little Snitch is "useless"? You're really saying that, in a post-Snowden world, it's "stupid" to want to know what your computer is communicating with? Because as far as I can see, what's really stupid is wilful ignorance. We have a right—and now we know we also have a need—to know what lines of communication our computers are establishing, so that we can prevent them from establishing communication with malicious entities. I'm sure that personal autonomy is an end that you, as a Kantian, can appreciate. So please, if you're going to hate on LS, hate on it because it (say) isn't good software, or doesn't do what it's supposed to do very well (two things which, by the way, I wouldn't agree with, but that's another post). Don't hate on it because it's "stupid" to want to know if and how you're being watched and what it is that's watching you, because that's not stupid at all; and I bet that if you really thought about it, you'd realize that.

I have noticed in my console log with my Mac disconnected from any network and not using my Mac the following message.

20-09-2015 8:46:20.278 AM nbagent[9081]: XPC Activity invoked with state=0

20-09-2015 8:46:20.279 AM nbagent[9081]: XPC Activity invoked with state=2

I realize this is an ancient post--but yesterday, Little Snitch helped me prevent an actual hacker from getting access to my machine. Unless there's a legit Apple website wanting my data going by the name of chris-valo.

Until one becomes familiar with certain legit connections, Little Snitch can seem like a pain in the butt. However, my experience has shown that it's invaluable. Not just for preventing hacks, but for loading down my system with all sorts of cookies I don't want or need.

Linc Davis wrote:

I have seen hundreds and maybe thousands like it, but I've never once heard of "Little Snitch" doing anything useful for anyone. If you install software that you don't trust, you have problems that it's not going to solve.

Agree. Never heard of this application, extensive network (Apple business, consumer) has never heard of it and, and although it's owners have a nice looking website, common consensus is "I wouldn't install." With proper security, firewall, modem/router settings, safe internet policies, shouldn't be any need for an unknown app like this.

We'll continue to rely on Apple's reliable safeguards and security settings without encumbering our systems with unknown applications. As always, thanks for the useful feedback.

So because you've never heard of it means it's no good?

I'd say you're not as much of an expert as you profess to be.

Not everyone needs LS (or don't know they do). Most users are oblivious to the amount of information their computer is distributing to outside sources.

I don't need Logic Pro or Keynote, but I'm not wasting time in the forums telling people I don't need them.

This is a place to seek help or give help. How does telling people that you don't feel the need to use a piece of software accomplish either?

That's like stopping by an auto dealership just to tell a salesperson that you don't see the need for airbags - the manufacturer already provides reliable safeguards and security features.

Fine - you don't want them. But millions of other people people do!

Actually, this discussion is PROOF that Little Snitch helps MANY people!

TENS OF THOUSANDS of people successfully use this app every day.

Sometimes they may have a question about an alert or process, but that doesn't make the app useless.

I had questions when I began using it and still do from time to time.

Check out how many hundreds of thousands of posts there are in Adobe's forums and even right here in Apple's Communities with qusteions/problems related to the software.

Does that make Adobe products and Apple software useless? If so, why are you using Apple software RIGHT NOW?

Guess some folks don't mind sending date to Apple even after the preferences are supposedly disabled.

I've had Spotlight Suggestions and ALL Safari Search options disabled since I started using this computer 7 months ago. But SpotlightNetHelper still tries to contact Apple via smoot.apple.com dozens of times a day.

Not to mention all the other processes unnecessarily contacting Apple all the time.

And if they're truly necessary, then why does my computer, iTunes, iCloud etc. work just fine with so many blocked?

Sure, they may need to contact Apple if I'm using FaceTime, iCloud, Find My Mac or iTunes Music Sharing. But I'm NOT, so those processes like identityservicesd, com.apple.geod.xpc and rtcreportingd need to keep their yaps shut!

Apple, Google, Yahoo and others greatly appreciate those who freely give away their privacy and browsing information (as well as their IP address) by not installing privacy apps and browser junk blockers. So Linc, keep on doing as you have been, I'll be Google has quite a file on you.

I agree, and whether it's HW or SW based, an IDS is a pain at first, as You define "normal" network traffic, but once You dial it in, it's at great tool, to protect your data. I provide Cyber Security Engineering support to the government on some of the highest classified networks in our nation. Installing an IDS on those systems is basically Computer Security 101. That's going all the way back to the basics. I also teach Cyber Security classes at a University and I recommend to all my students to get a SW based IDS on their own home computers, whether they are MAC, PC or Linux. It is an additional layer of Security.

Apparently it's Little Snitch > Little Snitch intercepted "Noticeboard wants to connect to swscan.apple.com" Legit?