Java app trying to make outgoing connections...

Tuq Sagago's Avatar

Tuq Sagago

19 Dec, 2017 05:00 PM

Can anyone explain why my Jar launcher on MacOs is trying to make an outgoing connection to masterpassword.com? See image: https://drp.io/i/rkU8BpUMz/+

  1. Support Staff 1 Posted by Maarten Billemo... on 19 Dec, 2017 05:44 PM

    Maarten Billemont's Avatar

    The Java app does an update check on start-up. You can disable this by setting the environment variable MPW_CHECKUPDATES to 0.

  2. 2 Posted by hybridstate on 26 Jan, 2018 11:38 PM

    hybridstate's Avatar

    that seems like a bad default for a security tool to be disrespectful of privacy and phone home automatically without user interaction.

    how about following the common style of some help - about - current version - would you like to check for updates button?

    i was expecting to be able to get a cross-platform and completely self-contained offline version that doesn't phone home.

    the java seems rather large and cumbersome if it is necessary to go out of the way to tell it not to phone home and create web traffic logs that it is a tool of the end user...

    and the web/js version seems to chain and point to scripts on other web sites...

    so fails on both counts compared to other actual stateless password manager systems, which is too bad, as this hybrid not-really-stateless system had me curious, since it could help with all the security question per site nonsense.

  3. Support Staff 3 Posted by Maarten Billemo... on 27 Jan, 2018 02:39 AM

    Maarten Billemont's Avatar

    If you're interested, I suggest you check out pure-C based the terminal client:

    https://github.com/Lyndir/MasterPassword/tree/master/platform-indep...

  4. 4 Posted by hybridstate on 02 Feb, 2018 11:12 PM

    hybridstate's Avatar

    forgot to update, but found a way to use the system that works well enough for my taste.

    i was trying the web-js version, and then noticed the it points to someone else's source scripts with a different demo interface style that i like better at https://tmthrgd.github.io/mpw-js/

    as i have previously been able to use https://pwdhash.github.io/website/ with firefox "save as, web page complete" function, and that worked fine in desktop and mobile android device, i gave it a try for that other demo page as well, and... it works!

    (side note, just for fun i tested the similar chrome browser "save web page" but the resulting file set only works in chrome, so stick to firefox.)

    probably good to save the checksums of the resulting file set, to know if it has been altered or corrupted. and be mindful of security enough that browser itself stays free of js system hijacks.

    hope that helps others as well.

Reply to this discussion

Internal reply

Formatting help / Preview (switch to plain text) No formatting (switch to Markdown)

Attaching KB article:

»

Attached Files

You can attach files up to 10MB

If you don't have an account yet, we need to confirm you're human and not a machine trying to post spam.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac

Recent Discussions

26 Apr, 2018 07:15 AM
25 Apr, 2018 04:27 AM
24 Apr, 2018 05:13 PM
24 Apr, 2018 12:29 PM
21 Apr, 2018 07:55 PM

 

19 Apr, 2018 05:16 PM
16 Apr, 2018 04:09 PM
09 Apr, 2018 08:08 AM
04 Mar, 2018 01:49 PM
19 Feb, 2018 04:48 AM
09 Feb, 2018 01:03 PM