HTTPS reqests

Description

Hello, our IT security specialist is a little bit paranoid about everything so he found out that after taking a screenshot with your program it sends some data via HTTPS to you domain - getgreenshot.org.. soo i'm curios - what kind of data is this?

Environment

None

Activity

Show:
Robin Krom
May 23, 2019, 10:25 AM

Hi,

There is nothing wrong with being paranoid! I’m glad you have a security specialist.

The fact that Greenshot is talking to our domain doesn’t have to do with taking a screenshot, that is pure coincidence. Greenshot doesn’t send anything, it checks if there are updates available and eventually loads the available version to display that an update is available.

There unfortunately is a bug that this request is going out a bit to often, which would explain why one would see something which only should happen once a week shortly after an action.

Fortunately Greenshot is open source and I can show your IT security specialist the code for this! For the version of Greenshot which is currently out there the code is here: https://github.com/greenshot/greenshot/blob/master/GreenshotPlugin/Core/RssHelper.cs#L83

Hope this helps?

P.S.

We actually will need to fix this update check frequency issue soon, as the requests could almost be considered a DDOS..

Best wishes,
Robin

Yuriy Sozonov
May 24, 2019, 1:49 AM

thanks a lot!

Robin Krom
March 4, 2020, 7:03 AM

We have updated the project-feed. which tells which versions are available, on our website. It seems to have solved the issue with that Greenshot was checking to often, so we might not need to rollout a new version of Greenshot for this specific “bug”.

I’m closing this issue, as you seem to have no more questions.

Assignee

Unassigned

Reporter

Yuriy Sozonov

Components

None

Affects versions

None

Labels

None

Priority

Major
Configure