Turn off Safari iCloud syncing?

[jshier]

Have you tried your testing with Safari's iCloud syncing turned off? That may be why Safari is sending search results back.

[SnijderC]

Did you also switch off the "Warn when visiting a fraudulent website" functionality? I think this is what is causing requests to Google. And actually it is not new, I always recommend switching it off because the tracking does not weigh up to the risk, unless you are just being an idiot clicking on things you shouldn't.

[landonf]

There's room for more precisely specifying the starting conditions -- e.g., all the knobs that control information dispersal -- and then running a new set of tests with all on and all off. If that's something anyone wants to start taking a crack at, I stubbed out a Methodology + Test Cases page here:

https://github.com/fix-macosx/yosemite-phone-home/wiki/Methodology-&-Test-Cases

Feel free to edit that at will. If anyone is familiar with net booting OS X and any mechanisms for customizing the install image, that would help a lot, too.

Some things may be marginal -- e.g., is OSCP a concern? Mail.app's automatic loading of remote images? -- which means that when it comes to documenting this stuff, more explanation is warranted to give people a better idea of what these things to, and whether they're comfortable having them enabled.

Right now I'm pretty much focused on protocol decoding, and enabling search by app/protocol/freetext/etc: https://github.com/fix-macosx/net-monitor/tree/protocol_decoding