GreenMamba

Q: Unwanted network connections.

To start I am hoping this post will be put in Apple Support Communities > Mac OS & System Software > El Capitan...

 

I am currently using a 13" Macbook Pro late 2014 RETINA display SSD hard drive with an i5 intel. However I have been using mac's for the past 10 or so years and I love them. I am starting this discussion for the simple yet complex questions involved with network activity. What ever happened to booting up your mac/system and you "the user" is the person who makes all of these outside connections to the internet. I use Little Snitch, along with iStats. It seems kind of weird to need an app to watch all of your network connections. I was always under the impression only Windows (especially windows 10) was the OS that kept and sent all of your data back to Microsoft. Simply put for the lay mac user we don't even know what the majority of these daemons are trying to connect to the web for. A quick example is gamed. I have researched and looked up all of the Game Kit Frameworks which support this protocol, in total I believe there are 16. I have looked at each and decided I don't use any of them so why does this daemon need to connect to the outside world automatically? So I decided I would not allow it to connect to the web. Unfortunately i have recently read El Capitan has "System Integrity Protection" which prevents even root from modifying system files. So in short what does this mean? Again as a lay mac user (i am not a programmer or computer engineer) why must certain items run even if I don't use them? Geo-location is another example, probably better than gamed. I am under the assumption after researching a little bit, the com.apple.geod.xpc protocol basically is a location service. Well what if I don't want my location to be documented constantly while using my mac? Why can't i just turn it off. I believe it is mainly used for Maps. I started this thread with the intention of maybe getting an answer with a list of protocols/daemons/connections which need to be made and why. It seems like everyday I am googling to see what one of these Apple services are and why I need to be allowing it to connect to the web. Recently I had an unauthorized ovh.net server attached to my netstats and it was only receiving data from my laptop. I am not sure if i caught a virus on a website or something, but it spooked me enough to wipe my SSD and do a clean re-install. For me this process isn't very difficult because i keep all of my photos and data backed up on external hard drives and i just wanted to make sure that the server which was connecting to me was gone, and took whatever little code that allowed it to connect was gone with it. In short I would really appreciate some replies with Apple services which try to connect upon startup but you do not need. I am trying to run a system with as little bloat as possible. I do not want to use iCloud but it almost seems impossible because i own an iPhone, Macbook, and other Apple products which all want to communicate (even though i wish they were just single entities). If I can please get some help with things I can get rid of without disrupting the integrity of my UNIX-like OS aka OS X El Capitan I would be very happy. I would also like to see some replies to see if anyone feels the same way I do.


Thanks


MacBook Pro (Retina, 13-inch, Mid 2014), OS X El Capitan (10.11.3)

Posted on Feb 1, 2016 8:30 AM

Close

Q: Unwanted network connections.

  • All replies
  • Helpful answers

Page 1 of 5 last Next
  • by GreenMamba,

    GreenMamba GreenMamba Feb 2, 2016 7:00 AM in response to GreenMamba
    Level 1 (13 points)
    Desktops
    Feb 2, 2016 7:00 AM in response to GreenMamba

    In response to this I would also like to ask about the Sparkle.framework problem. I have VLC loaded on my mac and would like to know if I need to worry about it.

  • by Duane,Helpful

    Duane Duane Feb 2, 2016 12:31 PM in response to GreenMamba
    Level 10 (124,018 points)
    Feb 2, 2016 12:31 PM in response to GreenMamba

    Please condense your post into a question.

  • by BobTheFisherman,Helpful

    BobTheFisherman BobTheFisherman Feb 2, 2016 12:31 PM in response to GreenMamba
    Level 6 (15,176 points)
    Feb 2, 2016 12:31 PM in response to GreenMamba
  • by KimUserName,

    KimUserName KimUserName Feb 2, 2016 11:04 AM in response to GreenMamba
    Level 4 (1,400 points)
    Notebooks
    Feb 2, 2016 11:04 AM in response to GreenMamba

    Well what if I don't want my location to be documented constantly while using my mac? Why can't i just turn it off. I believe it is mainly used for Maps.


    If you go under System Preferences / Security & Privacy, you will see the window below. You can select which application have access to Location Services.


    Screen Shot 2016-02-02 at 2.01.28 PM.png

     

    Kim

  • by Camelot,

    Camelot Camelot Feb 2, 2016 11:16 AM in response to GreenMamba
    Level 8 (47,233 points)
    Mac OS X
    Feb 2, 2016 11:16 AM in response to GreenMamba

    I kind of get what you're saying. The trouble is that it's a multi-faceted problem and you might not consider all the use cases.

     

    Usually, the features are enabled to provide some kind of convenience/enhancement to the user experience. Often in subtle ways you don't notice.

    Take the location services, for example - sure, it's used by Maps.app to center the map when you open it, but it may also be used by other applications. For example, some web sites may use your location to customize content (this is common for local news articles, for example). Or how about the clock automatically resetting based on your location (very handy if you're a traveller moving between time zones). Both of these are cases you might not notice - nor need - but they do have some value for a lot of people.

     

    I think the bigger issue you raise is one of transparency - an awareness of what connections are open, and what their purpose. It's hard to document those, though, in a way that makes sense for most users.

  • by GreenMamba,

    GreenMamba GreenMamba Feb 2, 2016 12:19 PM in response to Duane
    Level 1 (13 points)
    Desktops
    Feb 2, 2016 12:19 PM in response to Duane

    Duane,

     

    Sorry but its not as easy as asking one simple question. But per your request I will try to make a simple question out of it. I would like to know why the majority of protocol's which connect to the net via OS X El Capitan do so when I am not even using apps which use their frameworks.

     

     

    The reasoning for this question is due to the Sparkle.framwork vulnerabilities, and how it works.


    Thanks

  • by GreenMamba,

    GreenMamba GreenMamba Feb 2, 2016 12:26 PM in response to Camelot
    Level 1 (13 points)
    Desktops
    Feb 2, 2016 12:26 PM in response to Camelot

    Transparency is DEFINITELY the issue. I wish I could find a realtime updated list of protocols which are vital to OS X El Capitan's UNIX system integrity and why they NEED to be ran as soon as the system starts. For example Camelot, Maps.app also uses geo location to tag photos, videos and God only knows what else because I cannot find a complete list. But you are right, for the most part i think it is just to make the users experience more convenient. Unfortunately I am not one of those people. I want to know what is running and why.

  • by GreenMamba,

    GreenMamba GreenMamba Feb 2, 2016 12:33 PM in response to KimUserName
    Level 1 (13 points)
    Desktops
    Feb 2, 2016 12:33 PM in response to KimUserName

    Kim,

     

    My Location Services have been turned off. Thank you though.

  • by OregonRebel,

    OregonRebel OregonRebel Feb 3, 2016 7:59 PM in response to GreenMamba
    Level 1 (37 points)
    Mac OS X
    Feb 3, 2016 7:59 PM in response to GreenMamba

    It's a simple process to disable SIP.

     

    I disabled it primarily because that was the only way I could get rid of the butt-ugly Dock Apple forced upon us in El Capitan.

    Now I run cDock 2, which requires SIMBL be installed.

    It allows me to change many aspects of the Dock and I now have a stylish 3D Dock again.

     

    Default Folder X v4 also couldn't run with SIP enabled.

    Version 5 now runs as an app and works with SIP enabled.

     

    So the only reason I now have SIP disabled is because of the atrocious Dock.

    By providing such a repulsive look for an integral part of the OS and no way to change it, Apple is forcing me and others to use an unapproved hack and disable an important security feature that was specifically incorporated into El Capitan to prevent users from mucking it up.



    How to turn off System Integrity Protection in El Capitan


    1. Click the menu.
    2. Select Restart...
    3. Hold down command-R to boot into the Recovery System.
    4. Click the Utilities menu and select Terminal.
    5. Type csrutil disable and press return.
    6. Close the Terminal app.
    7. Click the menu and select Restart....

    To re-enable SIP, repeat these steps, changing csrutil disable to csrutil enable.

  • by Grant Bennet-Alder,

    Grant Bennet-Alder Grant Bennet-Alder Feb 3, 2016 7:57 PM in response to GreenMamba
    Level 9 (60,627 points)
    Desktops
    Feb 3, 2016 7:57 PM in response to GreenMamba

    Please use System preferences > Security & Privacy ...

     

      ... to turn off any accesses to your computer you do not want.

     

    Then go about your business and stop obsessing over this.

     

    If you decide to go out onto the Internet, they ARE out to get you. But since you have a well-protected Mac, "getting to you" requires your complicity in finding and installing the garbage for them.

     

    If you are not happy about the risks of the Internet, pull the plug on your Router and don't go there.

  • by OregonRebel,

    OregonRebel OregonRebel Feb 3, 2016 8:19 PM in response to Grant Bennet-Alder
    Level 1 (37 points)
    Mac OS X
    Feb 3, 2016 8:19 PM in response to Grant Bennet-Alder

    I don't know how you got to level 9 with blanket statements like that.

     

    Surely you're aware that simply following your steps does nothing to disable gamed, SpotlightNetHelper, Webkit, photolibraryd, storeassetd and a plethora of other processes from phoning home?

     

    Or did you fail to comprehend GreenMamba's message of saying that many users don't want our computers calling Apple numerous times a day/minute for things that are unrelated to what we're using our computers for?

     

    I've never opened Game Center, so why should gamed be calling home all the time?

     

    I've never opened Photos, so why should photolibraryd be calling home all the time?

     

    I have disabled Spotlight suggestions and Safari search engine suggestions, yet connection attempts by Spotlight via Spotlight Web Content and SpotlightNethelper still appear in Little Snitch.

     

    Etc. etc. etc.

  • by GreenMamba,

    GreenMamba GreenMamba Feb 5, 2016 10:38 AM in response to Grant Bennet-Alder
    Level 1 (13 points)
    Desktops
    Feb 5, 2016 10:38 AM in response to Grant Bennet-Alder

    LOL @ Grant Bennet-Alder... I am not scared of the internet I am scared of an OS capturing all of my data and locations. The internet is not the problem it is the 21 OS X protocols which request connections to the web before I run a single application. I actually took a screenshot of each protocol with its details, where it is located etc. Yet I still can't find out what all of these protocols do. I can find out "some" things they do, but not everything.

  • by GreenMamba,

    GreenMamba GreenMamba Feb 5, 2016 10:40 AM in response to OregonRebel
    Level 1 (13 points)
    Desktops
    Feb 5, 2016 10:40 AM in response to OregonRebel

    OregonRebel,

     

    Great reply. Very well said.

     

    Thanks.

  • by GreenMamba,

    GreenMamba GreenMamba Feb 5, 2016 10:42 AM in response to OregonRebel
    Level 1 (13 points)
    Desktops
    Feb 5, 2016 10:42 AM in response to OregonRebel

    OregonRebel,

     

    I wish I could mark your posts as helpful, but for some reason I can't.

Page 1 of 5 last Next