1Password v4.6.1.617 - How are updates applied?

sharza

I previously had 1Password set to automatically check for updates.

I am wondering however - if this enables automatic silent updates?

Reasoning behind this, is I got a warning from my firewall, that the application had changed, and I know for a fact that I did not manually accept any updates to the program. So at this point it would be VERY usefull information, because if there are no silent updates, something else changed the executable, and its like... not cool, and means I need to get to work on tracking that something else down.

I also do know I've been running version 4.6.1.616 on this PC (at some point in time, I'm unsure of when tho'). I can see in an older post of mine I've supplied that version number, and I'm generally pretty precise on such points.

So can anyone shed some light on this?

Thanks in advance.

---

1Password Version: 4.6.1.617
Extension Version: Not Provided
OS Version: Windows 8.1/10
Sync Type: Dropbox

MikeT

Hi @Sharza,

Thanks for writing.

I am wondering however - if this enables automatic silent updates?

No. At AgileBits, we actually dislike the idea of silent updates and we won't add this to 1Password but unfortunately, not all 1Password apps can be like this as the App Stores controls the update process. We do understand the convenience of the silent update but we believe they do more harm because you should be in full control of when your app updates and you should be fully informed of what is changing before you update. Sometime we will make a big change and you may not want to update until you have a chance to understand what it is doing now.

With that aside, what you saw doesn't make sense. We don't have any code in the app that does this, it must open up the update dialog with the changelog and ask you to proceed.

Are you sharing your computer with anyone or have multiple Windows account on the same computer? If it is updated in the other account, it will update it in the secondary account.

sharza

Hi @MikeT

I do not share computer, and believe I am quite in control with what happens on the PC (normally anyway).

I dislike silent updates as well - however some applications have gotten a real bad habit doing so anyway - Dropbox being an excellent
example. Simply keeping the Module Installer out of the loop, by replacing the files on its own, effectively evading UAC, makes the firewall the only thing notifying me about updates. I had at this time no such expectation for 1Password, but kind of hoped it - since I now need to track down what has happened.

Hopefully its a matter of me upgrading 1Password at an earlier point in time, but 1P checking for updates for the first time now, thus being caught by the firewall.

Can you (or someone else) by chance post the SHA256/512 checksums for the 1Password.exe file (v4.6.1.617) ?

Thanks in advance.

MikeT

Hi @sharza,

For SHA256, it is 1d3f25bdf8522f0a2c6c23b915b0b50dad763cee727b7fc4884080f41c41e79c.

Here's the virustotal.com analysis with more details: https://virustotal.com/en/file/1d3f25bdf8522f0a2c6c23b915b0b50dad763cee727b7fc4884080f41c41e79c/analysis/

sharza

Hi @MikeT

Thanks alot - but f... - pardon me french...

I've got this:

ca53654c36e98b0c9983fd72cc500b498dbf2f74862a6724683bf8fcfb934ad6

For v4.6.1.617

You're certain that SHA256 is for that particular version? Is there anything that could modify that file legitimately?

sharza

I just did a clean install on a different machine - I still get that SHA256.

Anything to do with the program running in DEMO mode? Is that set in a physical struct?

MikeT

Hi @sharza,

My apologies, I didn't see you asked for the installed 1Password.exe, not the installer. That's the SHA256 on the installer file, not the actual program files.

For 1Password.exe after the installation, the SHA256 is correct: ca53654c36e98b0c9983fd72cc500b498dbf2f74862a6724683bf8fcfb934ad6

sharza

Actually that's great news @MikeT - thanks for your update.

I'm not nervous anymore now - I am pretty sure I've updated 1Password at some time, and then suddenly when 1P attempted to check for updates, the firewall kicked in.

MikeT

I'm glad to hear that. Keep us informed if anything changes.