tag:gpgtools.tenderapp.com,2011-11-04:/discussions/problems/85703-macgpg-gpg-sends-analytics-data-to-analyticspaddlecom-without-consentGPGTools: Discussion 2018-12-06T09:40:56Ztag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-09-25T13:58:09Z2018-09-25T13:58:09ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Screenshot here: <a href="https://twitter.com/gerdnaschenweng/status/1044584572573216768">https://twitter.com/gerdnaschenweng/status/1044584572573216768</a></p></div>gerd.naschenwengtag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-09-25T14:43:53Z2018-09-25T14:43:53ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Hi Gerd,</p>
<p>we will add additional information about this to our FAQ.<br>
Paddle does provide analytics but not without prior consent, and we explicitly do not enable that feature. Unfortunately paddle uses the same IPs for all their services, so even though we are connecting to their API endpoint for activation code validation, little snitch resolves the domain to analytics.paddle.com since both endpoints listen to the same IP address.</p>
<p>We also <em>don't</em> use their capability to perform periodic remote validation since we don't want to share more information than absolutely necessary with them.</p>
<p>I hope this information helps.</p></div>Luke Letag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-09T11:58:13Z2018-12-06T09:40:56ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>I don't see how that info can be correct given my experience. Although I have purchased and validated the license when installing a week ago or so, I still captured outgoing calls today:</p>
<p>"On 9 Oct 2018, org.gpgtools.Libmacgpg.xpc tried to establish a connection to v3.paddleapi.com." I allowed this as I believed it was a periodic license validation (that I now read that you claim not to perform)</p>
<p>Then a few minutes later I had a new call that I denied:<br>
"On 9 Oct 2018, org.gpgtools.Libmacgpg.xpc tried to establish a connection to analytics.paddle.com."</p>
<p>Explanation?</p></div>postextag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-09T12:18:54Z2018-10-09T12:18:54ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>There are two domains:<br>
v3.paddleapi.com in my case had last activity 8h ago (the time I booted up)<br>
analytics.paddle.com last activity 23 minutes ago</p>
<p>Both originate from org.gpgtools.Libmacgpg.xpc.</p></div>gerd.naschenwengtag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-09T12:36:58Z2018-12-06T09:40:56ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Yes, those are the domains I wrote about above.</p>
<p>I now removed all permissions/denials for org.gpgtools.Libmacgpg.xpc<br>
So calls would once again be presented to me in Little Snitch.</p>
<p>After a few minutes a call to<br>
analytics.paddle.com<br>
was once again caught. And denied by me.</p></div>postextag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-09T14:22:29Z2018-10-09T14:22:29ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>This is solved in the nightly build and the next GPG Suite update will include the changes.</p>
<p>Could you please download and install our <a href="https://releases.gpgtools.org/nightlies">latest hotfix GPG Suite</a> and see if that solves your problem.</p>
<p>All the best,<br>
steve</p>
<p>Disclaimer: This is a development version which has not been thoroughly tested yet - bugs or crashes are to be expected. Thanks for helping us test.</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-10T17:29:29Z2018-10-10T17:29:29ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>I had to uninstall the latest hotfix. It crashes mail when trying to draft email replies with attachments. I will forward a bug-report when I get a chance.</p></div>gerd.naschenwengtag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-10T18:28:12Z2018-10-10T18:28:12ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Please do so. if you can please provide exact steps to reproduce and a crash log as txt file. We will then look into this as obviously that should not happen.</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-10T18:28:46Z2018-10-10T18:28:46ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Hi Gerd,</p>
<p>are you using macOS 10.14.1 (beta) by any chance?</p></div>Luke Letag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-11T04:09:59Z2018-10-11T04:09:59ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Yes Luke, I am on 10.14.1 18B57c. I have just installed GPG Suite 2018.4 (2338n). I will submit a crash-report if/when it happens. With the nightly from 1. Oct it crashed when replying to certain emails. I had to get work done, hence rolling back the update. I could not see a clear pattern other why it crashed for some and not others.</p></div>gerd.naschenwengtag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-11T05:51:31Z2018-10-11T05:51:31ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>We have a ticket for this problem. I connected this discussion with the existing ticket. That means, should this discussion get closed, it will be re-opened as soon as the ticket is closed. That way you'll stay in the loop and get notified as soon as we have news. Feel free to open a new discussions should you run into further problems or need assistance.</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-11T06:01:49Z2018-10-11T06:01:49ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Thanks - I have just reproduced the crash and logged here: <a href="https://gpgtools.tenderapp.com/discussions/nightly/1537-gpg-mail-macos-mail-crashes-on-latest-nightly">https://gpgtools.tenderapp.com/discussions/nightly/1537-gpg-mail-ma...</a></p></div>gerd.naschenwengtag:gpgtools.tenderapp.com,2011-11-04:Comment/461477342018-10-19T01:59:22Z2018-10-19T01:59:22ZMacGPG: GPG sends analytics data to analytics.paddle.com without consent<div><p>Hi Gerd,</p>
<p>Would you mind downloading and installing our <a href="https://releases.gpgtools.org/nightlies/GPG_Suite-latest.dmg">latest hotfix GPG Suite</a>?</p>
<p>GPG Suite 2349n and later should address this problem.</p>
<p>It might be necessary to re-activate GPG Mail in Mail › Preferences › Manage Plug-ins after installing the hotfix.</p>
<p>Disclaimer: This is a development version which has not been thoroughly tested yet - bugs or crashes are to be expected. Thanks for helping us test.</p></div>Luke Le