Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Why is XProtectUpdater contacting AKAMAI on startup?

Today Little Snitch said there was a new suggested rule for start up. The rule said XProtectUpdate was trying to contact 23.60.78.224. A Whois check showed its net name as AKAMAI (Akamai Technologies, Inc.)


I believe XProtectUpdate is part of Apple's security program.


Any reason it would be trying to connect to AKAMAI (Akamai Technologies, Inc.) instead of Apple?


Thanks

iMac, OS X Mountain Lion (10.8.2), 2GB RAM

Posted on Nov 30, 2012 2:20 AM

Reply
Question marked as Best reply

Posted on Nov 30, 2012 4:09 AM

Akamai is a download management program, often associated with Adobe products and Adobe's updater (you got Photoshop, Illustrator, InDesign or anything like that?). It basically allows your mac to download large files in a relatively timely fashion. In short, it's legit' and not something to worry about.


More worrisome is Little Snitch. False positives and constant notifications about normal behaviour cause this program to be a PITA. Unless you actually have particular security issues and need to monitor who's communicating with your computer, I'd recommend uninstalling this program. For most ordinary users, it's a waste of time and CPU resources.


Be sure to uninstall it properly according to the developer's instructions. Just trashing it won't get rid of the launch processes that kick in on start up.

34 replies

Aug 3, 2013 5:05 PM in response to softwater

Go lecture the people that constantly ask why they can't browse the adobe website while running pirated Photoshop. LS is remarkably lightweight and stable considering how deep it is embedded in a rather tempermental OS.
Bottom line... If you find little snitch annoying after using it for a couple days, by all means ger rid of it. As most users on LS know, the notifications decrease in proportion to how long one has run it because of the rule making/saving process. If yall don't like everyone and their mom (and the US govt.) knowing what kind of Pron you like (as well as when you like to like it), use lil Snitch and other precaustions... If you don't mind, by all means go it alone. I will say however, it is a heck of a lot more convienient than editing hosts files and all of the LS clones are not even close to as good as the OG.

Aug 3, 2013 7:21 PM in response to posimosh

Mountain Lion is not AT ALL temperamental. It is absolutely rock-solid: I haven't had a kernel panic or anything else on a GM version of OS X in 9 or 10 years.


It gets "tempermental" when users install lots of kernel extensions for anti-virus software and sound software that uses cruddy kernel extensions for DRM and licensing. And those are the cause of about 75% of crashes posted here, where about 24% more are due to hardware failures. Probably less than 1% of kernel panics in OS X are due to "temperamental" OS X software; it's mostly stuff shimmed in which causes crashes. Little Snitch, again while good software by a GREAT software company, can cause these problems.

Aug 4, 2013 5:42 AM in response to posimosh

If yall don't like everyone and their mom (and the US govt.) knowing what kind of Pron you like (as well as when you like to like it), use lil Snitch and other precaustions...


It's important to understand that Little Snitch has absolutely nothing to do with hiding your internet activity from others. If you believe that it does, you're mis-using it and are under a false sense of security.

Jul 3, 2014 8:24 AM in response to softwater

softwater wrote:


ds store wrote:


By the way, softwater is way off base about LittleSnitch, it's good to have Mac users being aware of what is going on with their machines as this is how malware is discovered and the rest of the non-techie side of the Mac community (and Apple) informed of the dangers.


Keep running LittleSnitch, your doing a good thing asking questions, being alert and not remaining a ignorant sheep.


No, you're 'off base', not me.


You see, its a matter of opinion.


Yours just happens to be wrong... 😉


He is correct and you are incorrect. You are wall off base about Little Snitch.


Looking at your recommendation, I'm sure that I have far more knowledge and experience in computer security than you do -- so you can trust me on that.


However, if you wish to remain combative, post your professional credentials when you respond. Have you ever designed a computer security architecture and presented/defended it to an evaluation team from NSA? Have you ever co-authored a paper presented at a professional security conference about a security architecture that you created? Have you been employed in a position where your sole responsibility was designing and implementing computer security? Have you ever been offered a job heading up a computer security lab for a major computer security firm?


In closing, your recommendation about Little Snitch was completely incorrect. Little Snitch does not exhibit false positives. It says that a specific process is trying to communicate, and to where, and then lets you choose whether to deny it or allow it. It doesn't make any judgments about whether the communication is good, bad, or indifferent. Running with no outgoing firewall leaves you vulnerable to applications and malware that may be attempting to send your private information where you do not want it going.

Jul 3, 2014 12:01 PM in response to thomas_r.

thomas_r. wrote:


Right or wrong, you're arguing about a conversation that took place in 2012, involving one participant who hasn't been active here for a while. There's not much point in continuing this.

Unfortunately, this conversation is where people land when when they do certain Google searches. And the dangerous misinformation about computer security contained herein is not something that should be left uncorrected.

Jul 3, 2014 2:29 PM in response to thomas_r.

thomas_r. wrote:


There is no "dangerous misinformation" there, simply differing opinions. Thing is, neither opinion is really wrong. Little Snitch can be useful, but it also has some potentially serious disadvantages. Anyone using it would be well-served to be aware of both points of view.


This is a field of professional expertise, not a matter of personal tastes and opinions. When I state that a post contains "dangerous misinformation" about computer security, that's the equivalent of a medical doctor stating that there is dangerous misinformation in an anti-vaccine post.


I understand that this is an important interest of yours and that you have a web page on the topic of Mac security, but I assure you that I would not be calling something "dangerous misinformation" if it were simply a matter of personal tastes. As you wrote on your own web page: "For such things, Little Snitch is a third-party firewall that blocks outgoing data rather than incoming data. Little Snitch can tell you a lot about what applications are making connection attempts and can help you to manage them. This is the most useful kind of firewall, in my opinion, as it can allow you to detect and block attempts to transmit data by applications that you don’t fully trust."


I am surprised that you feel there are potentially serious disadvantages to running Little Snitch now. Would you care to elaborate on them? Without Little Snitch, Hands Off, or an equivalent software firewall, isn't a user operating in-the-blind with no idea if the solitaire game they just loaded is harvesting e-mail addresses, Social Security numbers, phone numbers, etc. and transmitting them to some site in Russia, Nigeria, China, etc. ?

Why is XProtectUpdater contacting AKAMAI on startup?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.