On a tangential note, apps like HandsOff and LittleSnitch aren't effective at sandboxing malicious software. (This should be obvious, but it apparently requires saying.)<p>The easiest way to bypass HandsOff/LittleSnitch is by temporarily replacing a trusted executable with another binary - there is no mechanism in place to verify that the binary itself hasn't changed since it was granted permissions.<p><a href="http://natanyellin.com/2011/11/03/bypassing-little-snitch/" rel="nofollow">http://natanyellin.com/2011/11/03/bypassing-little-snitch/</a>