Level 1

137 points

Safari opening on its own overnight

I close Safari at night to keep down my limited bandwidth usage. Twice since the recent Safari update, I've noticed that in the morning Safari is open to this webpage:

https://consent-st.trustarc.com/get?name=crossdomain.html&domain=oracle.com

which is just a blank page at the time I see it.

I can't find any information on this URL, and can't figure out where or how I gave consent to anyone to remotely open my browser.

Does anyone have any info around this? Or a similar experience? It's a little worrisome.

Thanks...

iMac 21.5″, macOS 10.15

Posted on Nov 3, 2020 8:17 AM

Similar questions

29 replies

leee555

Level 1

4 points

Dec 8, 2020 10:41 AM in response to RaySat

@RaySat

The problem with uninstalling Java is that if your on a web browser that needs it, you'll have to download it again and then it's default is "automatically update"

Buffsters Author

Level 1

137 points

Dec 8, 2020 3:26 PM in response to Buffsters

And so far I've not had any websites require me to install Java.

Dec 9, 2020 4:50 AM in response to leee555

Are you sure about Java becoming obsolete? I have no information about, while flash will really end with 2020...

Buffsters Author

Level 1

137 points

Dec 14, 2020 12:56 PM in response to Buffsters

That's "reaching" Apple. Lol.

Buffsters Author

Level 1

137 points

Dec 14, 2020 12:59 PM in response to Buffsters

Also... Those popup warning messages themselves are often attempts to breach your system. I've never seen a legitimate one of those. Unless it came from one of your own installed security apps.

Nov 4, 2020 6:52 AM in response to rosas_Tony

Doing some searches I found in a Chinese website that it might have to do with Java but the translation wasn’t that great. Figures since the URL has oracle in the name.

TrustArc domain is a reputable domain that handles security around several things but hey do have a cookies solution.

I have no proof yet but with that being known it may be something legitimate although not expected behavior that this site opens.

Nov 18, 2020 12:47 AM in response to RaySat

The same for me, since a couple of months, on two different machines in different lan: Macbook pro (dynamic IP), iMac27 (static IP). At first I thought it was some intrusion in my office router with static IP, but the same happens at home (dynamic IP). At this point I am inclined to attribute it to something related to Java.

Any hints?

Thanks!

Daria

Nov 20, 2020 6:57 AM in response to rosas_Tony

While I was using my Mac, a java update popped up and low an behold immediately after that the blank page popped up. This is not malware and is related to Java and several google searches around the subject also prove this.

Not too sure on the solution however, but since I use my Mac as a headless server, It doesn't really bother me as much as others.

Nov 20, 2020 6:59 AM in response to Buffsters

Buffsters wrote:

There have been some helpful comments, with one possible data breach, but no solutions so far to this. Is anyone from Apple following this?

No, no one from Apple is following this. This is a user-to-user forum. Apple's participation is minimal. If you want direct advice from Apple, use the Contact Support link at the top right of every page of these forums.

Meanwhile, I'd suggest downloading and running the free version of Malwarebytes. It was originally developed by a long-time forum member and is useful for finding and removing adware.

https://www.malwarebytes.com/mwb-download/

Nov 27, 2020 3:21 AM in response to Buffsters

I get this two. This time only YouTube was open in my safari browser, for whatever thats worth.

I found this... looks like it has to do with websites using trustarc for cookie consent: https://cliqz.com/en/magazine/annoyed-by-cookie-consent-notices-there-is-a-method-behind-it

Buffsters Author

Level 1

137 points

Dec 14, 2020 12:55 PM in response to LouiseClaridge

Hi Louise,

Since it doesn't appear in my applications folder I went to the Library folder, which you get to by going to your Finder window and holding down the option key while clicking on the Go drop down, which makes Library visible. Open it. Search for Java. Move all folders related to Java to the trash. Search for Oracle and do the same. Empty trash.

A better more complete way of doing it for Java can be found in the link below, but it requires using Terminal.

https://explainjava.com/uninstall-java-macos/

I've had some success teaching Apple through online chat in the evenings. If they say they can't help you in that moment keep trying and I eventually get someone.

I hope this helps.

Nov 9, 2020 6:02 AM in response to Buffsters

On my machine it was related to a Java updated. I got the same page to pop open when I manually updated Java. I have seen this pop up on restart several times over the last couple of months.

Buffsters Author

Level 1

137 points

Nov 18, 2020 6:09 AM in response to Daria1958

I'm suspecting it's Java related as well. I'm not keen on Oracle as a company. I have uninstalled Java for now and we'll see if it stops happening.

Nov 18, 2020 6:13 AM in response to Buffsters

Yes, but unfortunately Java is necessary to use some important websites, as Banks and Official Governative Sites, so I can't uninstall it...

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Safari opening on its own overnight