On: CIA trying to inject into Little Snitch

[josteink]

Windows has very sophisticated firewalling and network access can be filtered on a per-process, per-network basis.

Restrictive companies will only allow pre-approved applications, for specific ports, like I.E. doing HTTP/S over ports 80 and 443, and only on approved/trusted networks.

[josefdlange → josteink]

Yeah, realized the folly in my logic -- see my edit on my top-level comment. This strategy is pretty much how LS works on macOS as well.