search

codota / tabnine-nvim

Tabnine Client for Neovim
https://tabnine.com
358 stars 33 forks source link

Security documentation #144

Closed tvquizphd closed 9 months ago

tvquizphd commented 9 months ago

It would be nice to have some documentation (or a link to documentation) of the requests we can expect from tabnine-nvim. I'm monitoring my network logs, and notice Tabnine makes requests to W.X.Y.Z.bc.googleusercontent.com, where W.X.Y.Z is some valid ipv4 address.

Describe alternatives you've considered

I've used iftop -n to observe the IPs targeted, rather than the hostnames. I understand the request targets are Google Cloud services, as expected. As someone without experience in Google Cloud, I'm still uncertain what the "ipv4"-like address prepended to "bc.googleusercontent.com" represents. They are usually not geolocated to the US (using ipgeolocation.io).

Additional context

Even a short response to this PR would be greatly appreciated documentation.

tvquizphd commented 9 months ago

Ah wow, fascinating -- Google Cloud reverses the IP addresses in the subdomains. So, a request to 34.122.156.49 ( Google LLC ) has the hostname of 49.156.122.34.bc.googleusercontent.com, source. Naturally, the reverse of the IP address is unrelated to the original, so it is merely trivia that 49.156.122.34 belongs to "Quadrant Televentures Limited" of Mohali, India. To anyone monitoring their network logs, rest assured!