diff --git a/extension/safari/TabFS/TabFS.xcodeproj/project.xcworkspace/xcuserdata/osnr.xcuserdatad/UserInterfaceState.xcuserstate b/extension/safari/TabFS/TabFS.xcodeproj/project.xcworkspace/xcuserdata/osnr.xcuserdatad/UserInterfaceState.xcuserstate
index 7b02891..532c8e2 100644
Binary files a/extension/safari/TabFS/TabFS.xcodeproj/project.xcworkspace/xcuserdata/osnr.xcuserdatad/UserInterfaceState.xcuserstate and b/extension/safari/TabFS/TabFS.xcodeproj/project.xcworkspace/xcuserdata/osnr.xcuserdatad/UserInterfaceState.xcuserstate differ
diff --git a/extension/safari/TabFS/TabFSService/TabFSService.swift b/extension/safari/TabFS/TabFSService/TabFSService.swift
index c722eac..80c6051 100644
--- a/extension/safari/TabFS/TabFSService/TabFSService.swift
+++ b/extension/safari/TabFS/TabFSService/TabFSService.swift
@@ -32,10 +32,15 @@ class TabFSService: NSObject, TabFSServiceProtocol {
     
     var ws: NWListener!
     func startWs() {
+        // TODO: randomly generate port and report back to caller?
         let port = NWEndpoint.Port(rawValue: 9991)!
+        
         let parameters = NWParameters(tls: nil)
         parameters.allowLocalEndpointReuse = true
         parameters.includePeerToPeer = true
+        // for security ? so people outside your computer can't hijack TabFS at least
+        parameters.requiredInterfaceType = .loopback
+        
         let opts = NWProtocolWebSocket.Options()
         opts.autoReplyPing = true
         parameters.defaultProtocolStack.applicationProtocols.insert(opts, at: 0)