itareanlnotani
Executive Member
- Joined
- Sep 14, 2008
- Messages
- 6,760
Be *very* careful if you use iCloud and iPhoto.
I returned home this week, and apparently I've already used 1/4 of this months bandwidth (20G/75G total) in less than 4 days.
I had everything shut down, but traffic was still happening, even on a reboot.
This was worrying, as I suspected I had a hacked box.
brew installed lsof and iftop to get a better idea of what was happening, and could see that most of the traffic was going to an https site on AWS.
(after rebooting with nothing open except skype)
lsof showed that the traffic was being caused by cloudphoto of all things.
lsof | grep s3-us-west-2-w.amazonaws.com
cloudphot 392 lawrence 50u IPv4 0x8885a0d002260159 0t0 TCP lozretina.lan:54354->s3-us-west-2-w.amazonaws.com:https (ESTABLISHED)
cloudphot 392 lawrence 54u IPv4 0x8885a0d002260159 0t0 TCP lozretina.lan:54354->s3-us-west-2-w.amazonaws.com:https (ESTABLISHED)
LozRetina:~ lawrence$ ps -ef | grep 392
501 392 1 0 1:37PM ?? 0:03.95 /System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
A quick google of iCloud upload issues shows that its not the first time its gone a bit crazy for people -
https://tidbits.com/article/15745
As we're bandwidth deprived here in .za, be careful, and uncheck any iCloud iPhoto boxes if any are ticked.
We monitor our ba(n)dwidth quite carefully, as we're on a capped connection, but that could have really hurt the pocket book if it happened on a cell connection...
I returned home this week, and apparently I've already used 1/4 of this months bandwidth (20G/75G total) in less than 4 days.
I had everything shut down, but traffic was still happening, even on a reboot.
This was worrying, as I suspected I had a hacked box.
brew installed lsof and iftop to get a better idea of what was happening, and could see that most of the traffic was going to an https site on AWS.
lsof showed that the traffic was being caused by cloudphoto of all things.
lsof | grep s3-us-west-2-w.amazonaws.com
cloudphot 392 lawrence 50u IPv4 0x8885a0d002260159 0t0 TCP lozretina.lan:54354->s3-us-west-2-w.amazonaws.com:https (ESTABLISHED)
cloudphot 392 lawrence 54u IPv4 0x8885a0d002260159 0t0 TCP lozretina.lan:54354->s3-us-west-2-w.amazonaws.com:https (ESTABLISHED)
LozRetina:~ lawrence$ ps -ef | grep 392
501 392 1 0 1:37PM ?? 0:03.95 /System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
A quick google of iCloud upload issues shows that its not the first time its gone a bit crazy for people -
https://tidbits.com/article/15745
As we're bandwidth deprived here in .za, be careful, and uncheck any iCloud iPhoto boxes if any are ticked.
We monitor our ba(n)dwidth quite carefully, as we're on a capped connection, but that could have really hurt the pocket book if it happened on a cell connection...