Suspicious files in OS image

home-assistant / operating-system

:beginner: Home Assistant Operating System

Apache License 2.0

4.89k stars 971 forks source link

Suspicious files in OS image #1128

Closed daemenseth closed 3 years ago

daemenseth commented 3 years ago

I download the vmdk files for hassio 5.8 and 5.9 When I only start it and did no configuring. I find some strange dutch bank files in it see screenshot

https://www.screenpresso.com/cloud/bK2Od/

rbray89 commented 3 years ago

Lookup MT940, and look at the directory those files are in. They are test files for a python MT940 parser library.

Home assistant is more more hacked than your github account. Please do more research before making accusations or sowing misinformation.

On Thu, Dec 24, 2020, 8:09 AM daemenseth notifications@github.com wrote:

I download the vmdk files for hassio 5.8 and 5.9 When I only start it and did no configuring. I find some strange dutch bank files in it see screenshot

https://www.screenpresso.com/cloud/bK2Od/

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/home-assistant/operating-system/issues/1128, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAILPFCPPD24HS7WU6Z7KNDSWNKRHANCNFSM4VIJEYFQ .

daemenseth commented 3 years ago

Ok sorry. Maybe I was too fast Buy they look strange to me. On a another test I dont der dutch banks but german Banks. And last week my firewall was reporting some p2p connections from my hassio box. In a old home assistant installation. I dont see these files.

Where are mt940 for used in hassio?

rbray89 commented 3 years ago

If I had to guess, MT940 is probably included as a dependency from another package.

On Thu, Dec 24, 2020 at 10:32 AM daemenseth notifications@github.com wrote:

Ok sorry. Maybe I was too fast Buy they look strange to me. On a another test I dont der dutch banks but german Banks. And last week my firewall was reporting some p2p connections from my hassio box. In a old home assistant installation. Is dont see these files.

Where are mt940 for used in hassio?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/home-assistant/operating-system/issues/1128#issuecomment-750932546, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAILPFFKIOMG3UFWPW6IEB3SWN3MBANCNFSM4VIJEYFQ .

agners commented 3 years ago

Yeah those files are part of the Home Assistant Core container. You can use pipdeptree in a Core devcontainer development environment to find which package pulled it in as a dependency:

$ pipdeptree
...
fints==1.0.1
  - mt-940 [required: Any, installed: 4.23.0]

Closing, as those files are part of Home Assistant Core to fulfill this dependency.