Live data from Hacker News

Uninstall the NightOwl app

robins.one

161–170 of 236 posts

Re: Uninstall the NightOwl app

#161
post #67

Earlier quoted context omitted.

Because the expansion of the wildcard needs to happen with the privileges granted by sudo. If you just ran "sudo rm ..." the expansion would be done by the current shell, which doesn't have the required privileges.

I don't know anything about MacOS. Normal users don't have r-x on /Users ? How do they access their own /Users/whatever homedir then?

Normal users have r-x on /Users, but for that wildcard to work, they would need r-x on /Users/foo, /Users/foo/Library, and /Users/foo/Library/LaunchAgents, for every "foo" user in the system.

Re: Uninstall the NightOwl app

#162
It looks like Apple has revoked the developer certificate. Anyone know if there's a public log somewhere showing when it was revoked?

The app was blocked from loading, but I still saw the two dylibs running. I wondered if it was because the certificate was revoked after they had already started. However, logging out and back in still showed them running. Perhaps they're persisting through log outs?

As well, I got a prompt from the macOS firewall to allow the mentioned AutoUpdate binary to listen for connections. That makes me think all of this was deployed in the last few days.

Edit: A reboot gave me the `“NightOwl” will damage your computer. You should move it to the Trash.` dialog. Allowing that did not fully clean things up (leaving a non-functional `/Users/*/Library/LaunchAgents/NightOwlUpdater.plist` in place and the usual preference files). For me, Hazel cleans those up.

I think for non-technical users who may not be familiar with the terminal would be to direct them to reboot.

Re: Uninstall the NightOwl app

#163

Earlier quoted context omitted.

NordVPN does this as well. Google and Amazon own large blocks of IP ranges for their cloud services, so it’s fairly easy to detect bots built on AWS and Google cloud. On the other hand, Verizon also owns a large block of IP addresses that they give out to their residential customers. NordVPN takes advantage of the fact that people like Netflix and Amazon don’t want to block out Verizon’s ip ranges, and disguise netwo…

I can't see anything suggesting they proxy VPN traffic through their users. Would certainly be a scandal worth talking about if true.

I believe users can opt in to let proxy traffic through.

Re: Uninstall the NightOwl app

#164

Earlier quoted context omitted.

I don't know anything about MacOS. Normal users don't have r-x on /Users ? How do they access their own /Users/whatever homedir then?

Normal users have r-x on /Users, but for that wildcard to work, they would need r-x on /Users/foo, /Users/foo/Library, and /Users/foo/Library/LaunchAgents, for every "foo" user in the system.

For that exact command, yes. But if `/Users/*` by itself can be expanded without root you can construct the list of files to delete without needing the `zsh -c`. Eg `for d in /Users/*; do sudo rm -f "$d/Library/LaunchAgents/NightOwlUpdater.plist"; done`

It's a minor point overall. I was just checking if MacOS had something else going on with its file permissions.

Re: Uninstall the NightOwl app

#165
post #63

Earlier quoted context omitted.

If I offer you 100 years worth of revenue for your browser extension are you really not going to entertain the idea of selling?

Sure but they probably won't offer that much. What I mean is that the value of this app, despite being free, is not zero, but that's probably what the developer was getting. So even if he got 10K for it, he's happy and moved on.

The app originally set the desktop theme to dark mode or not. That’s not worth more than a single one dollar payment, if that.

If I want to do some shady app shit I am buying install base. 100x an app that makes a few grand a year could still be worth it for my nefarious purposes.

Re: Uninstall the NightOwl app

#166
post #153

> It also tries to open a UPnP port forward on your router, but fails on mine because the key names are jumbled: This should fail on any router as you should have UPnP disabled.

I mean UPnP is a horrible spec but it’s a stop gap for restoring the fundamental capability of internet-connected devices in residential settings. All p2p apps (Tailscale for instance) need to act as a server temporarily and allow incoming traffic. Without the capability you’re a second class citizen, so to say. It’s infantilizing the user. Now, you can of course open the ports yourself, but this is inaccessible to t…

Tailscale uses STUN. No need for me to map ports. https://tailscale.com/kb/1082/firewall-ports/

Re: Uninstall the NightOwl app

#169
post #20

I know this happens with some frequency, I wonder how frequently the companies update the TOS with language like this. The very idea of a self-updating TOS that will govern all usage into perpetuity feels like it should have been legally stuck down years ago. This company's current language on indistinct modification rights: > We reserve our right to alter the terms in this Agreement and/or the pricing information an…

was there a similar (policy or functionality) change to "the great suspender" chrome extension recently? Browsers seem to have marked it as unsafe.

It's been malicious for two and a half years now:

https://news.ycombinator.com/item?id=25846504

https://news.ycombinator.com/item?id=25622015

Re: Uninstall the NightOwl app

#170
Does no one else find it difficult to read pure white on black sites? Ironic when the post is about a dark mode app I know.

I'm all for dark mode, but give me an option to switch back if it's a wall of pure white text please!

Post reply on HN