Live data from Hacker News

macOS is background scanning and following downloaded QR codes?

twitter.com

31–40 of 95 posts

Re: macOS is background scanning and following downloaded QR codes?

#31
post #20

Earlier quoted context omitted.

What are you talking about? It sounds like you don’t understand what is going on here. Perhaps you think some data is going to Apple?

If you have the misfortune of living in a country where accessing $BANNED_WEBSITE can get you a nighttime visit from the local goon squad, this could well get you tortured or killed.

No post body was provided.

Re: macOS is background scanning and following downloaded QR codes?

#32
post #24

Earlier quoted context omitted.

Having read the article I entirely understand what is going on here. Do you expect your images to be scanned on disk and the links in them to be opened, leaking your ip? What if you do something as simple as screenshot an address bar in a browser? Save a menu QR code? Now you are sending out traffic, accidentally, with your full ip to random places due to a service Apple inserted that you have no knowledge of.

Do you seriously believe that your IP is private? Do you know every site that has received your ip address? I think the honest answer to both of these questions has to be no.

I think the idea is that it is a way for your IP address to leak without a user-initiated request.

I could send you a QR code that I've setup specifically to get your IP address.

Re: macOS is background scanning and following downloaded QR codes?

#33
post #17

Earlier quoted context omitted.

There is absolutely nothing malicious that has been shown.

Scanning your images and followong links in them without user consent is pretty malicious.

How is it malicious? “Malicious” doesn’t mean “unwanted behaviour”. You are saying that Apple intend to do harm with this. How?

Re: macOS is background scanning and following downloaded QR codes?

#34
post #24

Earlier quoted context omitted.

Do you seriously believe that your IP is private? Do you know every site that has received your ip address? I think the honest answer to both of these questions has to be no.

I think the idea is that it is a way for your IP address to leak without a user-initiated request. I could send you a QR code that I've setup specifically to get your IP address.

No post body was provided.

Re: macOS is background scanning and following downloaded QR codes?

#35
post #17
post #9

Earlier quoted context omitted.

I feel like there are better ways to do this, to the point that this 'feature' actually looks really out-of-place. Why wouldn't you get these thumbnail previews when you actually scan the QR Code? You're going to be fetching/caching the favicon and framebuffer for the page anyways, there's literally no reason not to get that data at runtime rather than 3 hours later. It's not exactly malicious, but weird "we know bet…

There is absolutely nothing malicious that has been shown.

I agree. The problem is that it's rather annoying, and there are many such behaviors on MacOS (many of which you can't disable). Stuff like this is another good example of esoteric, almost curious behavior taking place without any input or prompt from the user. It's really absurd stuff.

Re: macOS is background scanning and following downloaded QR codes?

#37

"Background scanning" sounds more nefarious than what's probably really going on -- which is probably either generating thumbnail previews (for Finder) or indexing (for Spotlight), both of which are desired. Or maybe malware scanning to put files in quarantine if they point to dangerous content? macOS is also becoming more intelligent about text in images, e.g. it OCR's images so you can select text. I don't know if…

>It's not so different from when you text someone a URL in Messages, it automatically shows a title and thumbnail to both parties.

And that's how the pegasus/etc. pwned iPhones

Re: macOS is background scanning and following downloaded QR codes?

#39

"Background scanning" sounds more nefarious than what's probably really going on -- which is probably either generating thumbnail previews (for Finder) or indexing (for Spotlight), both of which are desired. Or maybe malware scanning to put files in quarantine if they point to dangerous content? macOS is also becoming more intelligent about text in images, e.g. it OCR's images so you can select text. I don't know if…

Automatic link following is pretty bad, nefarious or not. Intent is kinda beside the point of issue here; it's not like we're trying to sue Apple...

Or maybe we should group up a massive list of poor decisions into a formal complaint?

Re: macOS is background scanning and following downloaded QR codes?

#40

"Background scanning" sounds more nefarious than what's probably really going on -- which is probably either generating thumbnail previews (for Finder) or indexing (for Spotlight), both of which are desired. Or maybe malware scanning to put files in quarantine if they point to dangerous content? macOS is also becoming more intelligent about text in images, e.g. it OCR's images so you can select text. I don't know if…

>It's not so different from when you text someone a URL in Messages, it automatically shows a title and thumbnail to both parties. And that's how the pegasus/etc. pwned iPhones

It was before the zero day was closed.
Post reply on HN