Virus/ malware/ data leak in CN ?

[liviudo]

Virus? Malware?
Why 2 internet connections (wordpress.com and 192.185.41.192)?
Application rated as untrusted by Agnitum?

[CintaNotes Developer]

Hi Livuido,

thanks for your message!
Obvious question but still: did you download CN from cintanotes.com or from some other site?

[liviudo]

I use the portable version from portableapps.com
I will try with cintanotes.com portable version.
Can you check on your side to install Agnitum Outpost if you have the same results?

Liviu

[CintaNotes Developer]

Thanks for the info!
I'll check it with Outpost and get back to you asap.

[liviudo]

192.185.41.192 seems to be used for cintanotes updates.

I don't know what the registry key with "ProxyEnable" means.

192.0.84.247 is used for SimpleNotes sync.

What wordpress.com has to do with these? I don't know.
(Maybe for portableapps.com updates ?)

Liviu

PS: I used CN portable zip 2.5.1 version from CintaNotes.com

[reza]

As far as Simplenote goes, it is owned by the WordPress people (Automattic)

[liviudo]

Maybe you're right ... and I have too many concerns for nothing ...

[CintaNotes Developer]

We've installed Outpost and we only have registered the outgoing connections to:

192.185.41.192 : 80 - cintanotes.com (CN updates)
192.0.84.247 : 443 - api.simperium.com (Simplenote sync)

ProxyEnable is connected with WinInet which CN uses.

We haven't witnessed attempts to connect to "wordpress.com". But indeed Simplenote is made by Automaticc, owners of WordPress.
No way to tell for sure till we can reproduce this.

About the "untrusted" status, we'll contact Agnitum so that they register our code signing certificate with their database.