Security concerns (apparent logins) - can you explain what I am seeing, please?

tomgilbert
tomgilbert
Community Member

I just purchased the family Mac bundle and was upgraded to 1Password4 (Mac). This new version appears to introduce behaviour which worries me and doesn't seem appropriate for a security solution. It looks like login attempts using my saved credentials. No doubt I am wrong but could you please explain the following behaviour I am seeing (Macbook Air running 10.8.5 w/ all current updates applied)?

Launch 1Password4 application (mini not yet running), LittleSnitch reports a connection attempt that seems to correspond to one of my saved logins:
1Password 4
wants to connect to rink.hockeyapp.net on TCP port 443 (https)

IP Address  54.243.37.28
Reverse DNS Name    ec2-54-243-37-28.compute-1.amazonaws.com
Established by  /Applications/1Password 4.app/Contents/MacOS/1Password 4
Process ID  405

If I then enter the master password:
1Password 4
wants to connect to d2x2f6qan2kccj.cloudfront.net on TCP port 443 (https)

IP Address  54.230.1.252
Reverse DNS Name    server-54-230-1-252.lhr5.r.cloudfront.net
Established by  /Applications/1Password 4.app/Contents/MacOS/1Password 4
Process ID  405

If I enter master password into 1Password4 Mini:
2BUA8C4S2C.com.agilebits.onepassword4-helper
wants to connect to d2x2f6qan2kccj.cloudfront.net on TCP port 443 (https)

IP Address  54.230.1.252
Reverse DNS Name    server-54-230-1-252.lhr5.r.cloudfront.net
Established by  /Applications/1Password 4.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebits.onepassword4-helper.app/Contents/MacOS/2BUA8C4S2C.com.agilebits.onepassword4-helper
Process ID  407

Why should any of these connection attempts happen? I haven't tried to USE any of my saved Logins, just look at the list.

Cheers,
Tom Gilbert

Comments

  • Stephen_C
    Stephen_C
    Community Member

    I believe the rink.hockeyapp.net connection is checking for updates and the others are checking for rich icons (Preferences > General > Use rich icons), which are stored on AgileBits' server.

    Stephen

  • tomgilbert
    tomgilbert
    Community Member

    Hi Stephen thanks for getting back. Makes sense, turning off rich icons has got rid of the other connection attempts. Cheers.

  • Hi @tomiglbert,

    On behalf of Stephen_C, you're welcome.

    In the next update, 4.0.4, we'll be replacing HockeyApp with our own updater, so that should stop with the hockey app connections but instead, it'll go to our https://app-updates.agilebits.com server instead.

This discussion has been closed.