1PasswordAgent, 1PasswordThumbs and LittleSnitch

sparker

<div class="IPBDescription">Why does 1PasswordThumbs want to connect to other URLs?</div>I'm running 1Password on an environment where I have LittleSnitch installed. After any connection that needs a username/password pair, LittleSnitch is reporting a connection attempt to many different sites.



For example, on wunderground.com, I get a connection request for all of the following sites:



ical.wunderground.com

wac.1F91.edgecastcdn.net

cdnet1.travelscream.com

map-js.quantserve.com.akadns.net

map-pb.quantserve.com.akadns.net

an.tacoda.net.edgesuite.net

a1294.w20.akamai.net

secure-us.imrworldwide.com

anc.tacoda.net.edgesuite.net

anrtx.tacoda.net

a1406.g.akamai.net



What is going on here? Why would 1PW need to connect to all these locations? As for the details of the connection requests, I've attached a sample of one of the dialogs when I tried to connect to wordpress.com.



I'm VERY tempted to just flat out "BAN" any connection from 1PasswordAgent/1PasswordThumbs permanently (which Snitch can do). Can anybody explain what's going on and/or why I should NOT do that?



I'd appreciate it!



Steve

[Deleted User]

Hi Steve,



Thanks for the post, isn't LittleSnitch a fantastic tool, it really does let you control what's going on your system.



So, 1PasswordThumbs is the process 1Password uses to generate the previews you see of the websites you've saved logins for within 1Password, like so:



[img]http://cdn.agile.ws/sh/1pthumbs.png[/img]



In this example the login is for Twitter.com, so you will see LittleSnitch alert you that 1PasswordThumbs is connecting to at least Twitter.com. For sites that have ads, or embedded content, you'll also see these URLs as requests, because to get a clear snapshot of the site the process has to load all the content as you'd see it when you visited in Safari or any other browser. There's nothing to worry about here, but if you don't want these previews to be generated you can disable them by going to 1Password > Preferences > Logins and disable the 'Automatically download icons and previews for new Logins' option.



Hope that makes sense,





[quote name='sparker' timestamp='1286392712' post='12784']

I'm running 1Password on an environment where I have LittleSnitch installed. After any connection that needs a username/password pair, LittleSnitch is reporting a connection attempt to many different sites.



For example, on wunderground.com, I get a connection request for all of the following sites:



ical.wunderground.com

wac.1F91.edgecastcdn.net

cdnet1.travelscream.com

map-js.quantserve.com.akadns.net

map-pb.quantserve.com.akadns.net

an.tacoda.net.edgesuite.net

a1294.w20.akamai.net

secure-us.imrworldwide.com

anc.tacoda.net.edgesuite.net

anrtx.tacoda.net

a1406.g.akamai.net



What is going on here? Why would 1PW need to connect to all these locations? As for the details of the connection requests, I've attached a sample of one of the dialogs when I tried to connect to wordpress.com.



I'm VERY tempted to just flat out "BAN" any connection from 1PasswordAgent/1PasswordThumbs permanently (which Snitch can do). Can anybody explain what's going on and/or why I should NOT do that?



I'd appreciate it!



Steve

[/quote]

steve.n

A related question: where do the thumbs come from (the ones on the left)?



Some sites, for example Evernote & IBM have nice, full-sized thumbs, but most sites have small icons next to a globe.



Cheers,

- SteveN

khad

Hi SteveN,



Welcome to the forums!



The icons are [url="http://en.wikipedia.org/wiki/Favicon"]provide by the sites themselves[/url]. The larger icons were actually [url="http://en.wikipedia.org/wiki/Favicon#Device_Support"]an invention of Apple[/url] for use on iOS home screens. Because of this they are more typically found on high-technology, Apple-related, or web apps' sites.



I hope that helps. Cheers! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

sparker

[quote name='stu' timestamp='1286405472' post='12790']

Hi Steve,



Thanks for the post, isn't LittleSnitch a fantastic tool, it really does let you control what's going on your system.



So, 1PasswordThumbs is the process 1Password uses to generate the previews you see of the websites you've saved logins for within 1Password, like so:



<<<<<SNIP>>>>>[/quote]



Stu,



Thanks for the clear, concise summary of what's happening. I don't need the thumbnails so I'll just turn that feature off. I was going to "deny" all connection by Thumbs, which should have accomplished the same thing, but this is so much simpler (and more appropriate).



Thanks again!



Steve

[Deleted User]

[quote name='sparker' timestamp='1286912448' post='13128']

Stu,



Thanks for the clear, concise summary of what's happening. I don't need the thumbnails so I'll just turn that feature off. I was going to "deny" all connection by Thumbs, which should have accomplished the same thing, but this is so much simpler (and more appropriate).



Thanks again!



Steve

[/quote]



You're very welcome Steve, glad I could clear things up for you. Turning off the thumbnail generation within 1Password is indeed the best way to go, and I know lots of users do this for various reasons.



Thanks again for the post, one of the best things about our forums is that when a question like yours comes up everyone can see the answer.