News for hackers. Stuff that matters.

A comment on Apple, Firefox tools aim to thwart Facebook, Google tracking. Parent comment

Re:Apple, Firefox tools aim to thwart Facebook, Google tracking by sirn on Monday September 17, 2018 @11:00AM (#18006531)
Chrome and other Google softwares, by default will install a system-wide auto updater (Google Keystone[1]) set to run every 5 hours. The Keystone Agent cannot easily be removed, and will reinstall itself on every updates. There has also been an exploit[2] of this auto updater service.

If what you need is Chrome developer's tools, installing Chromium (or building your own, for the paranoid) seems like a much better choice to me.

[1]: Note that it has nothing to do with the google/keystone project on GitHub

[2]: https://bugs.chromium.org/p/project-zero/issues/detail?id=14...

[ Parent | on HN ]
Re:Apple, Firefox tools aim to thwart Facebook, Google tracking by copperx on Monday September 17, 2018 @11:45AM (#18006988)
Is the Keystone Agent run by cron? Modifying crontab is just a few keystrokes.
[ Parent | on HN ]
Re:Apple, Firefox tools aim to thwart Facebook, Google tracking by sirn on Monday September 17, 2018 @11:54AM (#18007075)
Keystone Agent is running by launchd on macOS, usually modifying defaults can stop it from running:

    defaults write com.google.Keystone.Agent checkInterval 0
However, this won't remove the agent from the system, and I think there's no way to be sure Google won't change this configuration key in an update (or even overriding its value).
[ Parent | on HN ]
Re:Apple, Firefox tools aim to thwart Facebook, Google tracking by saagarjha on Monday September 17, 2018 @11:44AM (#18006972)
What happens if you chmod the plist for the launch agent to 000?
[ Parent | on HN ]
Re:Apple, Firefox tools aim to thwart Facebook, Google tracking by sirn on Monday September 17, 2018 @11:58AM (#18007110)
I have never tried, but presumably launchd won't run the Keystone agent (although using defaults command can archive the same, if we were to just disable it from running).

The issue is when we want to keep Chrome and maybe other Google apps installed, while _not_ have Keystone, and not letting any Google software reinstall Keystone. In that case, it involve uninstalling Keystone agent, creating GoogleSoftwareUpdate directory then chmod that directory to 000 both in ~/Library/Google and /Library/Google

[ Parent | on HN ]
Re:Apple, Firefox tools aim to thwart Facebook, Google tracking by saagarjha on Monday September 17, 2018 @12:49PM (#18007580)
Is there a component to Keystone I'm missing aside from the agent? Because if launchd can't run it, presumably Keystone wouldn't work.
[ Parent | on HN ]
Re:Apple, Firefox tools aim to thwart Facebook, Google tracking by sirn on Monday September 17, 2018 @01:02PM (#18007702)
I believe Chrome itself do invoke Keystone when visiting chrome://chrome to manually check for updates, as it looks like from a forum post[1] (Chrome unable to check for updates after chmod 000'ing GoogleSoftwareUpdateAgent)

[1]: https://www.jamf.com/jamf-nation/discussions/14162/google-ch...

[ Parent | on HN ]