search

corecoding / Vitals

A glimpse into your computer's temperature, voltage, fan speed, memory usage and CPU load.
https://extensions.gnome.org/extension/1460/vitals/
GNU General Public License v2.0
1.46k stars 92 forks source link

Outgoing connection to corecoding.com domain #436

Closed t00 closed 4 months ago

t00 commented 4 months ago

Has this issue been covered in the Wiki?

Is there an existing issue reported already?

What is the unexpected behavior?

Using opensnitch I noticed vitals package is likely making a DNS resolution of corecoding.com domain when I unlocked my session, through gvfsd-http. Which feature makes this connection and for what purpose?

I am reporting a bug as there is no option to disable outbound connections nor any mention of them.

Steps to reproduce the unexpected behavior.

No outbound connections are being made

Relevant log output

DENY

Time: 2024-06-15 09:15:49.735660

Process:
/usr/lib/gvfsd-http
Cmdline:
/usr/lib/gvfsd-http --spawner :1.12 /org/gtk/gvfs/exec_spaw/0
CWD:
/home/too

UID: me (1000) PID: 4624

Node: unix:/local

UDP 58331:10.1.1.10 -> 1.1.1.1 (corecoding.com):53 

Rule:
deny-until-restart-simple-usr-lib-gvfsd-http

What distribution and version of Linux are you using?

Arch Linux 6.6.31-2-lts #1 SMP PREEMPT_DYNAMIC Wed, 22 May 2024 13:47:12 +0000 x86_64 GNU/Linux

What version of Gnome are you using?

extra/gnome-shell 1:46.2-1 (gnome) [installed: 1:46.1-2]

corecoding commented 4 months ago

This is for the Public IP address feature in the Network section. You can turn it off by clicking the gear icon next to the Network line item in Preferences. I understand and share your privacy concerns (in general). Core Coding does not log IP addresses in the requests (Apache logs are disabled for the https://corecoding.com/vitals.php endpoint).

Through the years we've had people write in and at one point I had this feature off by default. I had way more requests asking for Public IP address support, so I turned the default back on. I've had other requests to use other public IP address lookup services, but as you can imagine with each one being different that would be a large lift.