• On BNET: Why Domino's admitted its pizza sucked
advertisement
July 10, 2006 9:03 AM PDT

Mac OS X 10.4.7 Special Report: Widget "phone home" function actually a security measure

by CNET staff

A widely reported new function in Mac OS X 10.4.7 where the dashboardadvisoryd process connects to Apple servers is actually a security measure enacted by Apple -- not an attempt to retrieve private data.

As noted in Mac OS X 10.4.7's release notes, one new feature in the release is:

"You can now verify whether or not a Dashboard widget you downloaded is the same version as a widget featured on (www.apple.com) before installing it."

Apparently, the dashboardadvisoryd process handles this functionality.

In a statement to CNET, Apple says:

"The Dashboard Advisory feature is a security tool that ensures that the correct version of a widget has been downloaded from a third-party site and no personal information is transmitted back to Apple."

The verification comes in the form of an HTTP (hypertext transfer protocol) GET command sent to Apple's servers, which determines whether or not widgets are authentic.

As such, it does not appear that any personal information is transmitted to Apple's servers -- instead, a GET command is used to cross-reference installed Widgets.

The security measures from Apple are in response to a potential Widget vulnerability reported in mid-2005, where Safari would automatically open a compressed .zip file and execute a potentially malicious Widget.

If you still would like to turn this function off, the most surefire way of doing so is to block the connection "'dashboardadvisoryd' wants to connect to www.apple.com on TCP port 80 (http)" using the utility Little Snitch.

Index:

Resources

  • CNET
  • Little Snitch
  • Release Notes
  • Common Workarounds
  • Reverting (downgrading) to...
  • AirPort connectivity issue...
  • Bluetooth: Erratic device ...
  • Cellular data modems now n...
  • CS2 apps (Photoshop, etc.)...
  • Digital camera problems --...
  • Don't skip update verification process
  • Dozens of SMB processes sp...
  • Example of the dangers in ...
  • External drives not recogn...
  • FireWire device recognitio...
  • Increased fan activity -- ...
  • Intel re-release: Determin...
  • Internet access problems c...
  • iSync issues
  • MacBook Pro screen failure...
  • MacBook (13"): Vertical multi-colored lines at startup after Mac OS X 10.4.7 update
  • Microsoft Word crashing fr...
  • Palm synchronization issue...
  • Printing issues -- fixes
  • Problems caused by devices...
  • Problems starting up after...
  • Quark Xpress 6.5: Problems...
  • Rosetta problems -- potent...
  • Safari: Problems accessing...
  • SoundSticks unrecognized -...
  • Spotlight will be re-enabl...
  • SuperDrive burn issues -- ...
  • Third-party displays causi...
  • Trackpad difficulties -- i...
  • Two-finger click functionality now enabled on 15" MacBook Pros, PowerBooks
  • USB problems (device recog...
  • Widget "phone home" function actually a security measure
  • Windows sharing and proces...
  • More from Late-Breakers
  • Recent posts from MacFixIt
    iTunes 10 user interface sees some minor changes
    Apple seeds iOS 4.1 Gold Master to developers
    Possible fix for Harman Kardon iSub problems with PowerPC Macs
    Precautions to take before installing iTunes 10
    A reminder on how to reset your Mac's system password
    Mail messages appearing blank
    Adobe Lightroom update brings direct Facebook publishing; Camera Raw 6.2 released
    Weekly troubleshooting utilities update
    advertisement

    About MacFixIt

    MacFixIt is CNET's troubleshooting resource for all things Mac. The information here helps you navigate the ins-and-outs of Mac ownership with how-tos, troubleshooting information, news, reviews, and more.

    Add this feed to your online news reader