Given the level of concern, I will change the default and release a new version right away.
Thank you, well done!
iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
41–50 of 114 posts
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#42Given the level of concern, I will change the default and release a new version right away.
Thank you.
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#43Wow, this reminds me of how Cisco routers automatically try to SSH to anything that isn't a recognized command. (I may be mis-remembering part of this)
I remember it being telnet, not SSH. I started working with Cisco routers in the early 90's, before SSH was even a thing.
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#44It's horrifying to watch your own DNS traffic. All sorts of mysterious domains show up. (On a typical macbook on WiFi, this will do it:) sudo tcpdump -i en0 -s 5000 -n port 53 On mine, these get resolved every 30 seconds (probably some Adobe updater): scss-prod-ue1-notif-39.adobesc.com. Several servers get lookups of names long enough to be exfiltrating data: r3---sn-nvopjoxu-25ve.gvt1.com. (Google) gzunified-ecselas…
At least with the AWS ELB ones, the names can't be wildcards, so the only information that can be transmitted is info that the other party had set up ahead of time. 'gzunified-ecselast-1isehuisml2g4-663788831' is actually in someone's ELB list somewhere.
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#45One of the nice things about GitLab instead of GitHub is that there isn't a flood of low-information, high-anger comments once a thread makes the HN front page.
No, that's because the server is melting and giving 500 errors ;-)
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#46Is gitlab throwing a 500 for anyone else?
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#47It's horrifying to watch your own DNS traffic. All sorts of mysterious domains show up. (On a typical macbook on WiFi, this will do it:) sudo tcpdump -i en0 -s 5000 -n port 53 On mine, these get resolved every 30 seconds (probably some Adobe updater): scss-prod-ue1-notif-39.adobesc.com. Several servers get lookups of names long enough to be exfiltrating data: r3---sn-nvopjoxu-25ve.gvt1.com. (Google) gzunified-ecselas…
At least with the AWS ELB ones, the names can't be wildcards, so the only information that can be transmitted is info that the other party had set up ahead of time. 'gzunified-ecselast-1isehuisml2g4-663788831' is actually in someone's ELB list somewhere.
That ELB is part of Bitdefender's infrastructure.
EDIT: For those who want to know how to determine that in the future, hit a generic ELB hostname with SSL and you should get the cert mismatch warning back with details.
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#48Given the level of concern, I will change the default and release a new version right away.
This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue
Thanks for owning it and thanks for fixing it. Better response than you're likely to get almost anywhere!
Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'
#49Given the level of concern, I will change the default and release a new version right away.
This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue
Thank you for building the best terminal app in the world, and for responding to user feedback so quickly.