News for hackers. Stuff that matters.

A comment on macOS is background scanning and following downloaded QR codes?. Parent comment

Re:macOS is background scanning and following downloaded QR ... by vorpalhex on Wednesday October 05, 2022 @12:21PM (#33097495)
Having read the article I entirely understand what is going on here.

Do you expect your images to be scanned on disk and the links in them to be opened, leaking your ip? What if you do something as simple as screenshot an address bar in a browser? Save a menu QR code?

Now you are sending out traffic, accidentally, with your full ip to random places due to a service Apple inserted that you have no knowledge of.

[ Parent | on HN ]
Re:macOS is background scanning and following downloaded QR ... by dev_tty01 on Wednesday October 05, 2022 @01:25PM (#33098499)
I don't know, but I wouldn't be surprised if this is being done via Apple's private relay. If so, your IP address is not being leaked to anyone.
[ Parent | on HN ]
Re:macOS is background scanning and following downloaded QR ... by martin_a on Wednesday October 05, 2022 @01:37PM (#33098694)
The thread says she got an information that somebody requested the URL and it was her own IP address. So no private relay here.
[ Parent | on HN ]
Re:macOS is background scanning and following downloaded QR ... by grooot on Wednesday October 05, 2022 @12:23PM (#33097530)
Do you seriously believe that your IP is private?

Do you know every site that has received your ip address?

I think the honest answer to both of these questions has to be no.

[ Parent | on HN ]
Re:macOS is background scanning and following downloaded QR ... by vorpalhex on Wednesday October 05, 2022 @12:48PM (#33097963)
http://letstrack.you/?id=grooot

Throw that to disk for me so I can map where you are, where you go, when your machine is up and how often your search indexing runs.

[ Parent | on HN ]
Re:macOS is background scanning and following downloaded QR ... by _justinfunk on Wednesday October 05, 2022 @12:35PM (#33097716)
I think the idea is that it is a way for your IP address to leak without a user-initiated request.

I could send you a QR code that I've setup specifically to get your IP address.

[ Parent | on HN ]