{"id":9977,"date":"2014-10-22T14:30:42","date_gmt":"2014-10-22T18:30:42","guid":{"rendered":"http:\/\/mjtsai.com\/blog\/?p=9977"},"modified":"2014-10-22T14:57:05","modified_gmt":"2014-10-22T18:57:05","slug":"yosemite-phone-home","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2014\/10\/22\/yosemite-phone-home\/","title":{"rendered":"Yosemite Phone Home"},"content":{"rendered":"<p>The <a href=\"http:\/\/mjtsai.com\/blog\/2014\/10\/19\/spotlight-suggestions-and-privacy\/\">fix macosx folks<\/a> have a <a href=\"https:\/\/github.com\/fix-macosx\/yosemite-phone-home\">Git repository<\/a> showing all the data that Yosemite sends to Apple, with different preferences settings:<\/p>\n<blockquote cite=\"https:\/\/github.com\/fix-macosx\/yosemite-phone-home\"><p>When the user selects &lsquo;About this Mac&rsquo; from the Apple menu, Yosemite phones home and <code>s_vi<\/code>, a unique analytics identifier, is <a href=\"https:\/\/github.com\/\/fix-macosx\/yosemite-phone-home\/blob\/master\/eff-user-r0\/Applications\/Utilities\/System%20Information.app\/Contents\/MacOS\/System%20Information\/20141019T192957Z-effuser-%5B172.16.174.146%5D:49495-%5B23.3.12.195%5D:80.log\">included in the request<\/a>. (<code>s_vi<\/code> is used by <a href=\"http:\/\/microsite.omniture.com\/t2\/help\/en_US\/whitepapers\/cookies\/cookies_analytics.html#concept_98805569FE284595B34A7684647D7C71__section_5D50A078DE444D12B7D927D68FF3B679\">Adobe\/Omniture&rsquo;s analytics software<\/a>).<\/p><\/blockquote>\n<p>Speculation is that it is looking up the marketing name of the Mac model. The cookie was first set when visiting Apple&rsquo;s Web site.<\/p>\n<blockquote cite=\"https:\/\/github.com\/fix-macosx\/yosemite-phone-home\"><p>The logs show that a copy of your Safari searches are <a href=\"https:\/\/github.com\/fix-macosx\/yosemite-phone-home\/blob\/master\/eff-user-r0\/Applications\/Safari.app\/Contents\/MacOS\/Safari\/20141019T204534Z-effuser-%5B172.16.174.146%5D:49700-%5B17.249.89.247%5D:443.log\">still sent to Apple<\/a>, <em>even when selecting DuckDuckGo as your search provider, and &lsquo;Spotlight Suggestions&rsquo; are disabled<\/em> in <a href=\"https:\/\/fix-macosx.com\/assets\/img\/spotlight_terms.16cdcfbf.png\">System Preferences &gt; Spotlight<\/a>.<\/p><\/blockquote>\n<p>This is because Safari has a separate preference (under Search, not Privacy) to turn off Spotlight Suggestions.<\/p>\n<blockquote cite=\"https:\/\/github.com\/fix-macosx\/yosemite-phone-home\"><p>When setting up a new Mail.app account for the address <code>admin@fix-macosx.com<\/code>, which is hosted locally, searching the\nlogs for &ldquo;fix-macosx.com&rdquo; shows that Mail quietly <a href=\"https:\/\/github.com\/fix-macosx\/yosemite-phone-home\/blob\/master\/eff-user-r0\/Applications\/Mail.app\/Contents\/MacOS\/Mail\/20141019T193338Z-effuser-%5B172.16.174.146%5D:49713-%5B17.134.62.228%5D:443.log\">sends the domain entered by the user to Apple<\/a>, too.<\/p><\/blockquote>\n<p>My guess is that Apple has a database of mail server configuration information to help make the setup process smoother for users.<\/p>\n<p>I don&rsquo;t think Apple is doing any nefarious here, but it is a good exercise to make this sort of list. I hope that Apple is doing so internally and that one day they will be more transparent about it the way they are about iOS security. The current <a href=\"https:\/\/www.apple.com\/legal\/privacy\/en-ww\/\">privacy policy<\/a> is a good start.<\/p>\n<p>An open question is the extent to which <a href=\"http:\/\/www.apple.com\/privacy\/\">Tim Cook&rsquo;s vision<\/a> is possible:<\/p>\n<blockquote cite=\"http:\/\/www.apple.com\/privacy\/\"><p>A few years ago, users of Internet services began to realize that when an online service is free, you&rsquo;re not the customer. You&rsquo;re the product. But at Apple, we believe a great customer experience shouldn&rsquo;t come at the expense of your privacy.<\/p><\/blockquote>\n<p>Cook frames it as Apple not needing your information because it isn&rsquo;t monetizing it, but there are definitely cases where having more information would help Apple improve the user experience&mdash;at the expense of privacy. It is not always possible to maximize both.<\/p>","protected":false},"excerpt":{"rendered":"<p>The fix macosx folks have a Git repository showing all the data that Yosemite sends to Apple, with different preferences settings: When the user selects &lsquo;About this Mac&rsquo; from the Apple menu, Yosemite phones home and s_vi, a unique analytics identifier, is included in the request. (s_vi is used by Adobe\/Omniture&rsquo;s analytics software). Speculation is [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"","apple_news_api_id":"","apple_news_api_modified_at":"","apple_news_api_revision":"","apple_news_api_share_url":"","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[38,126,150,30,903,355,103,1042],"class_list":["post-9977","post","type-post","status-publish","format-standard","hentry","category-technology","tag-apple","tag-applemail","tag-email","tag-mac","tag-mac-os-x-10-10-yosemite","tag-privacy","tag-safari","tag-spotlight"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/9977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=9977"}],"version-history":[{"count":2,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/9977\/revisions"}],"predecessor-version":[{"id":9979,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/9977\/revisions\/9979"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=9977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=9977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=9977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}