Stop recording browsing history!

General discussions about Little Snitch
mvuser
Posts: 1
Joined: Wed Nov 08, 2017 12:11 pm

Stop recording browsing history!

Postby mvuser » Wed Nov 08, 2017 12:20 pm

How do I stop Little Snitch v 4.x from recording all my browsing history in the Network Monitor?

What is the point of clearing of browser (e.g. Chrome) history if Little Snitch keeps it anyway?

Is there a way to create Little Snitch rules for the browsers I use but prevent recording all the
domains I visit, i.e. not store a browsing history?

How can I downgrade to a previous LS version which does not record all browsing history?

laryt77
Posts: 1
Joined: Mon Nov 13, 2017 6:20 pm

Re: Stop recording browsing history!

Postby laryt77 » Mon Nov 13, 2017 6:24 pm

I agree. this is a serious problem. Every browser and other application which connects to a domain will be recorderd FOREVER. You can delete the apps in the monitor (which deletes the log but it could potentially be recovered so that's bad) You guys SHOULD implement a solution. What good is a firewall when it logs things it should not.

thinqer88
Posts: 1
Joined: Thu Nov 16, 2017 12:37 pm

Re: Stop recording browsing history!

Postby thinqer88 » Thu Nov 16, 2017 12:42 pm

:x :x :x :x :x :x

I JUST CHECKED WHAT YOU GUYS SAID and WTF :(

You guys are RIGHT! I have thousands of records in the monitor for every site I visited the last few months. That's some crazy shit! I know a firewall should be able to work on application level but recording EVERY domain you visit with EVERY BROWSER is way too much. I tried looking for a solution (like automatic removal of these logs but this feature is non-existent)

As a developer I take my security and privacy very serious. Can someone from Objective respond to this issue!? I urge others who read this to also post in this thread and e-mail them. I think unless we do something nothing will change.

i90rr
Posts: 7
Joined: Tue Oct 17, 2017 4:53 pm

Re: Stop recording browsing history!

Postby i90rr » Sat Nov 18, 2017 4:24 am

Thanks everyone for raising awareness of this HUGE PRIVACY ISSUE.

Can anybody tell me how to check these logs?
Many thanks in advance.

bgarrett
Posts: 1
Joined: Tue Nov 21, 2017 12:44 pm

Re: Stop recording browsing history!

Postby bgarrett » Tue Nov 21, 2017 12:46 pm

Yes this is a huge problem that doesn't seem to have a solution other than turning off logging and that's not ideal. I was interested in purchasing this but can't in the form it is in now.

roberto
Posts: 2
Joined: Sat Dec 17, 2016 3:30 am

Re: Stop recording browsing history!

Postby roberto » Fri Nov 24, 2017 7:13 pm

I agree an option to purge the logs automatically would be great (e.g. after 1h, 12h, 24h, 7d, 30d, 1y, never), however, there is an extremely easy fix for this.

In the network monitor, right click on the application in question, and select "Remove from List". Voila, all is good in the universe again.

bloggeroften
Posts: 1
Joined: Mon Nov 27, 2017 6:59 pm

Re: Stop recording browsing history!

Postby bloggeroften » Mon Nov 27, 2017 7:01 pm

I bought this recently and am quite upset with this issue. Removing a process from the list only works until the program is restarted, so it's not a real solution. Removing individual processes permanently would be an acceptable solution.

christian
Objective Development
Objective Development
Posts: 1387
Joined: Thu Nov 09, 2006 11:46 am

Re: Stop recording browsing history!

Postby christian » Wed Nov 29, 2017 11:49 am

I can see your issues here. Network Monitor always stored all connections. In version 3, the list was lost on restart of Network Monitor, now it is persisted in an encrypted database. When you remove an app from the list with Cmd-Delete, all PAST history is deleted. When the app continues communicating, it re-appears with the new communication.

We are aware that there is a privacy issue here and we plan to come up with a solution in a future release. However, this solution depends on other changes we need to roll out first.

rccp
Posts: 6
Joined: Fri Jul 17, 2015 4:34 am

Re: Stop recording browsing history!

Postby rccp » Sat Jan 27, 2018 11:21 pm

Is there a solution to this issue yet? I would have bought this software long ago if this was not a problem.

The solution can't simply be that you can delete the history. The history sits on a database on your computer and simple deletion leaves it easily recoverable and available to adversaries. Acceptable solutions would be a full delete with overwrites option, OR a feature where we know exactly where this information sits. That way we can clean it ourselves as part of routine junk file management. This information should be in the monitor tab under preferences.

In the meantime, perhaps the team can help the users figure out where these files sit?

christian
Objective Development
Objective Development
Posts: 1387
Joined: Thu Nov 09, 2006 11:46 am

Re: Stop recording browsing history!

Postby christian » Sun Jan 28, 2018 1:04 am

You CAN delete the history. Just select all connections in Network Monitor and press Cmd-Delete or right-click them and choose "Delete".

The database is in ~/Library/Application Support/Little Snitch/ConnectionsCache.sqlite. If you want to delete the file, please turn off Network Monitor while you do so. Otherwise the database may get into an inconsistent state.

BTW: The database is encrypted and the (random) encryption key is stored in your Keychain. So it's not easily available to adversaries.

Bettis
Posts: 1
Joined: Thu Jan 25, 2018 12:26 pm

Re: Stop recording browsing history!

Postby Bettis » Sun Jan 28, 2018 5:41 pm

christian wrote:You CAN delete the history. Just select all connections in Network Monitor and press Cmd-Delete or right-click them and choose "Delete".


Thanks Christian, I only just realized this was possible!

rccp
Posts: 6
Joined: Fri Jul 17, 2015 4:34 am

Re: Stop recording browsing history!

Postby rccp » Mon Jan 29, 2018 8:17 pm

christian wrote: The database is in ~/Library/Application Support/Little Snitch/ConnectionsCache.sqlite.


many thanks - this is exactly what I am looking for. Unfortunately, I cant find that folder. I'm on a mac OS High Sierra. Any ideas where else it might be? I can find a folder at: ~/Library/Application Support/Objective Development/Little Snitch/ all i can find is a file called configuration.xpl

In a different folder, I can find configuration.user.xpl

but no connectionscache anywhere. any thoughts?

christian
Objective Development
Objective Development
Posts: 1387
Joined: Thu Nov 09, 2006 11:46 am

Re: Stop recording browsing history!

Postby christian » Mon Jan 29, 2018 8:34 pm

The "~" represents your home directory. Sorry for the confusion. Finder hides the "Library" directory in your home. You can open it in a Terminal window with the command

open ~/Library

rccp
Posts: 6
Joined: Fri Jul 17, 2015 4:34 am

Re: Stop recording browsing history!

Postby rccp » Mon Jan 29, 2018 8:41 pm

I believe thats where i am, but all i can find in that folder is a file called configuration.user.xpl

christian
Objective Development
Objective Development
Posts: 1387
Joined: Thu Nov 09, 2006 11:46 am

Re: Stop recording browsing history!

Postby christian » Mon Jan 29, 2018 8:50 pm

There is no alternative location of the connections cache.It's in the same directory as configuration.user.xpl. If there is no such file, connections cannot be persisted.


Return to “Little Snitch General”

Who is online

Users browsing this forum: dj@sec and 5 guests