
- #APPLE THE UNARCHIVER ZIP FILE#
- #APPLE THE UNARCHIVER FULL#
- #APPLE THE UNARCHIVER FREE#
- #APPLE THE UNARCHIVER MAC#
The developers allow you to display the normal icon for the app or the #StandwithUkraine version. Spark, an excellent email client, is a great example of this. I don't want to be reminded of this when I am unzipping some files on the job, please remove this in your next build or at least give us the option to remove it. I stand with Ukraine and have donated to the cause of helping them get on their feet and fight during this time of war. But why I am writing this review is because of a very frustrating pop-up within The Unarchiver.

#APPLE THE UNARCHIVER MAC#
If you want to protect yourself from these types of issues, never give an app – even from the App Store – access to your home directory, this can happen if the app pops up an open file dialog and you open your home directory with it, or if you drag your home directory into the app.Amazing utility, but with the annoyance of pop-upsįirst of all MacPaw, love what you guys do, Setapp and CleanMyMacX are staples of the amazing apps and services available for the Mac platform, and developers like you guys keep the Mac such an enticing platform. The technique adopted by the apps discussed here is very similar to what Adware Doctor did. Apple is improving this situation with macOS Mojave, but the App Store review process should have caught these practices and rejected the apps for violating the user’s privacy. Users do not expect sandboxed apps to get this level of access to their systems, but it is important to note that when an open file dialog is opened by a sandboxed app, if you use it to open your home directory, the app can potentially get access to lots of private information including browsing history, iMessage conversations, e-mail messages and more. This is a massive privacy issue and we expect Apple to pull these apps from the Mac App Store fairly quickly.
#APPLE THE UNARCHIVER FREE#
Unarchiver” is the nº 12 most popular free app in the US Mac App Store.
#APPLE THE UNARCHIVER FULL#
Inspecting the files the app archives and uploads to their servers revealed the full browser history for Safari, Google Chrome and Firefox, separate files specifically dedicated to storing the user’s recent Google searches on the same browsers and a file containing a complete list of all apps installed on the system, including information about where they were downloaded from, whether they are 64-bit compatible and their code signature.Īs of today, “Dr. After allowing access to the home directory, the app proceeded to collect the private data and upload it to their servers (we blocked that with a proxy). Selecting “Scan” launched an open dialog with the home directory selected, this is how the app gets access to a user’s home directory, which it needs in order to collect the history files from browsers.
#APPLE THE UNARCHIVER ZIP FILE#
After extracting a zip file with the app, it offered an option to “Quick Clean Junk Files”. We were able to confirm these reports, at least with the Dr. All of this information is collected upon launching the app, which then creates a zip file and uploads it to the developer’s servers. The app will also collect information about other apps installed on the system. Other researchers followed up and found that apps distributed by this “Trend Micro, Inc.” account on the Mac App Store collect and upload the user’s browser history from Safari, Google Chrome and Firefox to their servers. This issue was reported before by a user on the Malwarebytes forum, and in another report. Today, we’re talking specifically about the apps distributed by a developer who claims to be “Trend Micro, Inc.”, which include Dr. It looks like we’re seeing a trend of Mac App Store apps that convince users to give them access to their home directory with some promise such as virus scanning or cleaning up caches, when the true reason behind it is to gather user data – especially browsing history – and upload it to their analytics servers.


When you give an app access to your home directory on macOS, even if it’s an app from the Mac App Store, you should think twice about doing it.
