Privacy related
-
Here is a screenshot (from Portmaster) one minute after Vivaldi start.
All requests are repeating at 2 minutes interval.OS: Linux
All extensions are disabled.
All google services are disabled.
No downloads pending, just a finished one in history.
Blocking trackers and adds.What are Vivaldi talking to 192.168.1.199 which is an Android TV and why is using multicast?
Why is Vivaldi connecting to google?
-
@stilgarwolf said in Privacy related:
What are Vivaldi talking to 192.168.1.199 which is an Android TV and why is using multicast?
This is for casting support on LAN devices. Please read:
https://en.wikipedia.org/wiki/Simple_Service_Discovery_ProtocolWhy is Vivaldi connecting to google?
It needs to check for updated Chromium components. Please read:
https://vivaldi.com/blog/decoding-network-activity-in-vivaldi/ -
@Pathduck I know what they are, I don't know why they are here.
I don't want any cast service and I did not authorize one.
Also I did not authorize any direct requests from the browser to any machine in my local network.
And all of them (including updates) every 2 minutes? -
Two new connections to google after start :
I'm using snapshot on Linux, all extensions removed, browsing data deleted (including extensions data).
Any Ideea? -
@stilgarwolf They're DNS requests, so probably not to Google but to your DNS server asking for the IP of these addresses.
Could be anything really. I don't get these when starting on Windows. Possibly related to the Hangouts extension - have you enabled this? I have it enabled here as well, but don't see the request for
mtalk.Would help with more information, doesn't this things of your have more info? Try opening the > button?
Also try using a proper network sniffer instead of something that tries to guess what IPs are being asked.
$ tshark -i4 udp port 53 Capturing on 'Ethernet' ** (tshark:6820) 11:07:21.102831 [Main MESSAGE] -- Capture started. ** (tshark:6820) 11:07:21.105366 [Main MESSAGE] -- File: "D:\bin\cygwin\tmp\wireshark_EthernetKEEU91.pcapng" 1 0.000000 192.168.0.10 52484 router.asus.com 53 DNS 81 Standard query 0x1134 A downloads.vivaldi.com 2 0.000128 192.168.0.10 61638 router.asus.com 53 DNS 81 Standard query 0x31cb HTTPS downloads.vivaldi.com 3 0.000666 192.168.0.10 60152 router.asus.com 53 DNS 77 Standard query 0x84a7 A mimir.vivaldi.com 4 0.000994 192.168.0.10 55602 router.asus.com 53 DNS 77 Standard query 0xcdb6 HTTPS mimir.vivaldi.com 5 0.008069 router.asus.com 53 192.168.0.10 52484 DNS 181 Standard query response 0x1134 A downloads.vivaldi.com CNAME vivaldi.map.fastly.net A 151.101.66.137 A 151.101.130.137 A 151.101.194.137 A 151.101.2.1 37 6 0.008069 router.asus.com 53 192.168.0.10 61638 DNS 175 Standard query response 0x31cb HTTPS downloads.vivaldi.com CNAME vivaldi.map.fastly.net SOA ns1.fastly.net 7 0.008069 router.asus.com 53 192.168.0.10 60152 DNS 93 Standard query response 0x84a7 A mimir.vivaldi.com A 31.209.137.18 8 0.008069 router.asus.com 53 192.168.0.10 55602 DNS 136 Standard query response 0xcdb6 HTTPS mimir.vivaldi.com SOA carl.ns.cloudflare.com 9 0.624410 192.168.0.10 55604 router.asus.com 53 DNS 85 Standard query 0x63b9 PTR 10.0.168.192.in-addr.arpa 10 0.627685 router.asus.com 53 192.168.0.10 55604 DNS 85 Standard query response 0x63b9 No such name PTR 10.0.168.192.in-addr.arpa 11 0.628576 192.168.0.10 55605 router.asus.com 53 DNS 84 Standard query 0x799c PTR 1.0.168.192.in-addr.arpa 12 0.629463 router.asus.com 53 192.168.0.10 55605 DNS 113 Standard query response 0x799c PTR 1.0.168.192.in-addr.arpa PTR router.asus.com 13 4.924131 192.168.0.10 60904 router.asus.com 53 DNS 85 Standard query 0xd77c A chrome.cloudflare-dns.com 14 4.924244 192.168.0.10 64203 router.asus.com 53 DNS 85 Standard query 0xcf26 HTTPS chrome.cloudflare-dns.com 15 4.924868 192.168.0.10 65350 router.asus.com 53 DNS 85 Standard query 0x738b A chrome.cloudflare-dns.com 16 4.925196 192.168.0.10 60090 router.asus.com 53 DNS 85 Standard query 0x87bb HTTPS chrome.cloudflare-dns.com 17 4.927169 192.168.0.10 52100 router.asus.com 53 DNS 85 Standard query 0x97cf A chrome.cloudflare-dns.com 18 4.927276 router.asus.com 53 192.168.0.10 64203 DNS 158 Standard query response 0xcf26 HTTPS chrome.cloudflare-dns.com HTTPS 19 4.927440 192.168.0.10 57462 router.asus.com 53 DNS 85 Standard query 0x2e91 HTTPS chrome.cloudflare-dns.com 20 4.927501 router.asus.com 53 192.168.0.10 60090 DNS 158 Standard query response 0x87bb HTTPS chrome.cloudflare-dns.com HTTPS 21 4.930407 router.asus.com 53 192.168.0.10 57462 DNS 158 Standard query response 0x2e91 HTTPS chrome.cloudflare-dns.com HTTPS 22 4.941795 router.asus.com 53 192.168.0.10 60904 DNS 117 Standard query response 0xd77c A chrome.cloudflare-dns.com A 172.64.41.3 A 162.159.61.3 23 4.941886 router.asus.com 53 192.168.0.10 52100 DNS 117 Standard query response 0x97cf A chrome.cloudflare-dns.com A 172.64.41.3 A 162.159.61.3 24 4.941993 router.asus.com 53 192.168.0.10 65350 DNS 117 Standard query response 0x738b A chrome.cloudflare-dns.com A 172.64.41.3 A 162.159.61.3 25 4.953411 192.168.0.10 61904 router.asus.com 53 DNS 77 Standard query 0x32a6 A ocsp.digicert.com 26 4.953643 192.168.0.10 58519 router.asus.com 53 DNS 77 Standard query 0x98dc HTTPS ocsp.digicert.com 27 4.954159 router.asus.com 53 192.168.0.10 61904 DNS 204 Standard query response 0x32a6 A ocsp.digicert.com CNAME ocsp.edge.digicert.com CNAME fp2e7a.wpc.2be4.phicdn.net CNAME fp2e7a.wpc.phicdn.net A 192.229 .221.95 28 4.956874 router.asus.com 53 192.168.0.10 58519 DNS 219 Standard query response 0x98dc HTTPS ocsp.digicert.com CNAME ocsp.edge.digicert.com CNAME fp2e7a.wpc.2be4.phicdn.net CNAME fp2e7a.wpc.phicdn.net SOA n s1.phicdn.net -
As mentioned in the article @Pathduck links to, "mtalk" is one server associated with site push notifications, e.g. used by news sites to send you information about what happens when you give them permission to do so. Maybe you have subscribed to such notifications?
the android host is AFAICT also associated with the same Google Services systems as mtalk.
-
No push notifications, no google services, no hangouts and no google DNS.
I forgot to disable "Use secure DNS" (in vivaldi://settings/security) which was reenabled (again!) after update and disabling it solved the requests to android.clients.google.com.
But the requests to mtalk.google.com remains.Deleting .config/vivaldi-snapshot/Default/Preferences solved the issue: I have no connections to mtalk.google.com, replaced by new ones to static.google.com, client2.google.com and client2.googleusercontent.com.
