probonopd / go-appimage

Go implementation of AppImage tools
MIT License
760 stars 73 forks source link

Insane requests to public ip's from HiveMQ (Public MQTT Broker) #200

Closed nuclimedia closed 2 years ago

nuclimedia commented 2 years ago

Accidentally I have detected connections to external ip's (3.123.180.179 and 52.59.17.149) from appimaged. They belong to an MQTT Broker.

tcp        0     17 00.00.0.0:41860     52.59.17.149:1883       ESTABLISHED 6114/appimaged-649-
tcp        0      0 00.00.0.0:41864     52.59.17.149:1883       ESTABLISHED 6114/appimaged-649-
tcp        0     17 00.00.0.0:41868     52.59.17.149:1883       ESTABLISHED 6114/appimaged-649-

They seems to be legitimate connections from appimaged daemon. Maybe to perform autoupdate tasks. But in no case would the frequency (one per second) or the need to connect to external IPs be justified.

For me, this is an abuse of privacy and should be removed as soon as possible.

probonopd commented 2 years ago

Thanks @nuclimedia. Seems to be a bug, duplicate of https://github.com/probonopd/go-appimage/issues/144. Do you know how to fix it?