Security concerns (apparent logins) - can you explain what I am seeing, please?
I just purchased the family Mac bundle and was upgraded to 1Password4 (Mac). This new version appears to introduce behaviour which worries me and doesn't seem appropriate for a security solution. It looks like login attempts using my saved credentials. No doubt I am wrong but could you please explain the following behaviour I am seeing (Macbook Air running 10.8.5 w/ all current updates applied)?
Launch 1Password4 application (mini not yet running), LittleSnitch reports a connection attempt that seems to correspond to one of my saved logins:
1Password 4
wants to connect to rink.hockeyapp.net on TCP port 443 (https)
IP Address 54.243.37.28 Reverse DNS Name ec2-54-243-37-28.compute-1.amazonaws.com Established by /Applications/1Password 4.app/Contents/MacOS/1Password 4 Process ID 405
If I then enter the master password:
1Password 4
wants to connect to d2x2f6qan2kccj.cloudfront.net on TCP port 443 (https)
IP Address 54.230.1.252 Reverse DNS Name server-54-230-1-252.lhr5.r.cloudfront.net Established by /Applications/1Password 4.app/Contents/MacOS/1Password 4 Process ID 405
If I enter master password into 1Password4 Mini:
2BUA8C4S2C.com.agilebits.onepassword4-helper
wants to connect to d2x2f6qan2kccj.cloudfront.net on TCP port 443 (https)
IP Address 54.230.1.252 Reverse DNS Name server-54-230-1-252.lhr5.r.cloudfront.net Established by /Applications/1Password 4.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebits.onepassword4-helper.app/Contents/MacOS/2BUA8C4S2C.com.agilebits.onepassword4-helper Process ID 407
Why should any of these connection attempts happen? I haven't tried to USE any of my saved Logins, just look at the list.
Cheers,
Tom Gilbert
Comments
-
I believe the rink.hockeyapp.net connection is checking for updates and the others are checking for rich icons (Preferences > General > Use rich icons), which are stored on AgileBits' server.
Stephen
0 -
Hi Stephen thanks for getting back. Makes sense, turning off rich icons has got rid of the other connection attempts. Cheers.
0 -
Hi @tomiglbert,
On behalf of Stephen_C, you're welcome.
In the next update, 4.0.4, we'll be replacing HockeyApp with our own updater, so that should stop with the hockey app connections but instead, it'll go to our https://app-updates.agilebits.com server instead.
0