Uninstall the Nightowl App, now.

3 years ago by octalfudge to c/apple_enthusiast

EDIT: It seems this made it to HN. Is this my cue to Soatokify this article?

The NightOwl application has existed since 2018 and is used to automatically switch between light/dark modes on the operating system. It is an alternative to the built in macOS automatic mode which only switches when the user steps away from the computer.

However, the application has been bought out by “TPE.FYI LLC” in late 2022 that forcibly joins your devices into a botnet for use of market research, without your knowledge (other than the TOS in small text on the download page) or express consent (this feature cannot be turned off, even when the app is quit). This is documented in their terms of service.

load all comments

steven 72 points 3 years ago

This is extremely shady. How do I know if other apps I have are making me part of a botnet?

save

path: 0 2239964, hotness: undefined, score: 72, children: 20

pineapplelover 25 points 3 years ago

Use free and open source software

save

path: 0 2239964 2240921, hotness: undefined, score: 25, children: 6

the_vale 39 points 3 years ago

Something being open source doesn't automatically make it safe to use. Sure, it means it's easier for people to check for security issues, but how many people actually have the knowledge and the time to do it? And even then, take the log4j vulnerability from a while ago, it's been present in the code since 2013 and only reported in like 2021.

save

path: 0 2239964 2240921 2245901, hotness: undefined, score: 39, children: 3

Chocrates 5 points 3 years ago

You still need to build package and install it yourself though or else you are trusting someone else. Open Source software has been used as a vector for attacks before by bad actors getting access to the build system or source code.

save

path: 0 2239964 2240921 2243888, hotness: undefined, score: 5, children: 0

steven 2 points 3 years ago

I try to where I can, but unfortunately this is not always an option for me.

save

path: 0 2239964 2240921 2262567, hotness: undefined, score: 2, children: 0

LoafyLemon 10 points 3 years ago

You need to examine your devices packets and see what servers they're going to. You can do that through Wireshark on Windows, or use an external sniffer to examine them.

I'm not aware of any native apps for Mac that can do that, but maybe others will know.

save

path: 0 2239964 2240744, hotness: undefined, score: 10, children: 10

tdawg 12 points 3 years ago

You mean like Wireshark lol?

save

path: 0 2239964 2240744 2240878, hotness: undefined, score: 12, children: 2

sijt 8 points 3 years ago

If you're just interested in connections (and don't care about packet inspection) you can use Little Snitch (paid) or LuLu (FOSS).

Actually, all the Objective-See Foundation security tools are great and target specific classes of vulnerabilities, like LuLu for outgoing network connections, RansomWhere for detecting ransomwear by looking for encryption events, Oversight that monitors you cameras and microphones and a bunch of other really small, but really useful security utilities. Better than running a shady antivirus that's going to suck up loads of resources and rely on signatures.

save

path: 0 2239964 2240744 2248072, hotness: undefined, score: 8, children: 1

LazaroFilm 6 points 3 years ago

PiHole on a Raspberry Pi

save

path: 0 2239964 2240744 2243335, hotness: undefined, score: 6, children: 3

resurrexia 5 points 3 years ago

Wireshark is available on intel and arm macs.

save

path: 0 2239964 2240744 2240920, hotness: undefined, score: 5, children: 0

conciselyverbose 7 points 3 years ago

Vigilance. Resource monitoring and network traffic monitoring. The occasional scan with anti malware tools to catch known bad actors.

I use malwarebytes when someone needs a scan, though they got naggy enough that I uninstalled it right after using it for my grandfather. Other monitoring IDK. LittleSnitch is popular on Mac but I have no personal experience with it.

save

path: 0 2239964 2240813, hotness: undefined, score: 7, children: 0

AnotherPerson -5 points 3 years ago

Read all the TOS?

save

path: 0 2239964 2240410, hotness: undefined, score: -5, children: 0

Welcome

Rules:

Communities of Interest:

Welcome

Rules:

Communities of Interest: