NEWS
A few Mac users are concerned about a feature in the latest update to Mac OS that directs their computers to check in with Apple's servers on a regular basis without the user's knowledge or permission.
Apple released an update to Mac OS last week that fixed a few bugs and added some features. One feature it added was described as the ability to verify that a widget was an authentic program. Widgets are small software programs that provide Mac users with little bits of useful information, such as the weather report or stock tickers.
Some bloggers have become concerned Apple is collecting information without their authorisation, after the recent furore caused by Microsoft's Windows Genuine Advantage Notification program. Microsoft inserted a pre-release program in a regular Windows update which checks Windows PCs to make sure they are running a genuine copy of the operating system but the company included that beta feature without telling users and has since posted instructions on how to remove it after a backlash.
Apple's Dashboard Advisory verification software was designed as a security feature, a company representative said. "Apple takes protecting user privacy very seriously. The Dashboard Advisory feature is a security tool that ensures that the correct version of a widget has been downloaded from a third-party site and no personal information is transmitted back to Apple," the company said in a statement.
Dashboard Advisory looks at just widgets, not the rest of the operating system. Widgets available on Apple's Downloads page are actually hosted by the companies that developed the widgets, not Apple. The verification feature is designed to ensure that the widget advertised on Apple's Download page is the same widget that gets installed on a Mac, or to prevent someone from spoofing a link to trick a user into downloading a different program.
A Mac with the latest version of Mac OS, version 10.4.7, sends a HTTP GET command to Apple's servers to verify the widget is authentic, the company representative said. There is no way to turn off the transmission, which takes place about every eight hours, and the user is not prompted before the transmission is made.
Tom Krazit writes for CNET News.com
Comments
There are 2 comments. Join the discussion
1. David Hughes
So Apple is able to identify what Widgets customers download. What an excellent way of doing market research. It isn't necessarily the customers that are at risk, but the Widget suppliers.
2. Richard A
If there is no personal data transferred, it can't really be called "snooping". Okay, the feature should probably be user selectable but any security conscious user would never turn it off anyway.
This is a storm in an eggcup but if you really don't like it, just install Little Snitch ( www.obdev.at ) to control outgoing network traffic.
Apple gets beaten with a stick for a hypothetical risk via Widgets and then gets slapped again for beefing up security by cross-checking Widgets with a secure White List.