Found Stingray log on my iPhone/Mac?

[repoman]

I was getting kind of OCD and manually cleaning out my Mac of all files (I wrote down which areas it seems to have user data in it and will put in a spoiler box to keep it from derailing this thread) and found stuff similar to this in it: (I am using another example I found online to protect my own data)

May 18 07:04:56-MacBook-Pro.local com.apple.iCloudHelper[519] <Debug>: PCSIdentityCollectionSetup: <CFBasicHash 0x7fc933d68f30 [0x7fff783ebed0]>{type = mutable dict, count = 3,
entries =>
0 : <CFString 0x7fff77cdc1e0 [0x7fff783ebed0]>{contents = "kPCSSetupUsername"} = <CFString 0x7fc935b1dc40 [0x7fff783ebed0]>{contents = “******@icloud.com"}
1 : <CFString 0x7fff77cdc2c0 [0x7fff783ebed0]>{contents = "kPCSSetupDSID"} = <CFString 0x7fff77cdc800 [0x7fff783ebed0]>{contents = "<<VALUE>>"}
2 : <CFString 0x7fff77cdc240 [0x7fff783ebed0]>{contents = "kPCSSetupPassword"} = <CFString 0x7fff77cdc800 [0x7fff783ebed0]>{contents = "<<VALUE>>"}
}
May 18 07:04:56-MacBook-Pro.local com.apple.iCloudHelper[519] <Debug>: __PCSAccountHasStingrayIdentities
May 18 07:04:56-MacBook-Pro.local com.apple.iCloudHelper[519] <Error>: PCSHasStingrayIdentities: YES
May 18 07:04:58-MacBook-Pro.local com.apple.iCloudHelper[519] <Error>: PCSCopyStingrayIdentity: <CFData 0x7fc935046c00 [0x7fff783ebed0]>{length = 1851, capacity = 1851, bytes = 0x62820737308207330c1266656c696d65 ... 79e6cba464020101} (error: (null))
May 18 07:04:58-MacBook-Pro.local com.apple.iCloudHelper[519] <Debug>: PCSIdentityCollectionSetup: done <PCSIdentity@0x7fc933e48040 name: ****** @icloud.com pubkey: qIyzwUNtxTTxM7Pm3ajVfURE4tVl2q+PNLXBbV6nR/k= service: 1 <correctCompactKey>> BAT: 20150518170423;Mac OS X;14D136

<Email Edited by Host>

MacBook Pro with Retina display, OS X Yosemite (10.10.3), null

Any opinions on this?

Also, below are the areas I found personal files on Macs:

Show

First of all, I used the Mac supplied Text Editor to look at these files.

Second, I recommend you watch this video if you don't know how to find hidden system files:


Untitled 1 is my hard drive that has OSX on it:

untitled1/Users/<user name>/Library/ all files are in this subdirectory:

../caches/metadata/safari/History had ~20,000 entries even though I had deleted all history through browser.

../caches/org.videolan.vlc/art kept random thumbnails of videos played

../caches/com.bittorrent.utorrent this had all the .torrent files

../Application Support/utorrent all previous .torrent files

../ApplicationSupport/mobilesync/backup these are iPhone/ipod backup files like pictures and so on

../Preferences/org.videolan.plist and ../Preferences/org.videolan.LSSharedFileList list of videos watched by VLC even from a long time ago...

../Preferences/com.apple.QuickTimePlayer list of old videos watched

../Preferences/com.apple.Preview.LSSharedFileList list of pictures viewed only from last session

../Safari/HistoryIndex.sk Has lots of history even after browser shows none.

../Safari/Downloads.plist lots of old downloads from months ago.

../Cookies/.. Lots of old cookies in several files- many more than I had left in safari by choice.

I also got rid of a lot of old logs, but it seems like there is no personal stuff in them:

That is found in:

../Logs/CrashReporter/MobileDevice/... then my iPod and iPhone.

That is about it. I literally looked at almost every folder I thought that would have stuff on it, and these are the only ones that seem to. I am sure there is more stuff, but that is probably only gotten by someone more skilled than me. Like "super-hidden" files or files that I can't access.

 

[Loren Pechtel]

I was getting kind of OCD and manually cleaning out my Mac of all files (I wrote down which areas it seems to have user data in it and will put in a spoiler box to keep it from derailing this thread) and found stuff similar to this in it: (I am using another example I found online to protect my own data)

May 18 07:04:56-MacBook-Pro.local com.apple.iCloudHelper[519] <Debug>: PCSIdentityCollectionSetup: <CFBasicHash 0x7fc933d68f30 [0x7fff783ebed0]>{type = mutable dict, count = 3,
entries =>
0 : <CFString 0x7fff77cdc1e0 [0x7fff783ebed0]>{contents = "kPCSSetupUsername"} = <CFString 0x7fc935b1dc40 [0x7fff783ebed0]>{contents = “******@icloud.com"}
1 : <CFString 0x7fff77cdc2c0 [0x7fff783ebed0]>{contents = "kPCSSetupDSID"} = <CFString 0x7fff77cdc800 [0x7fff783ebed0]>{contents = "<<VALUE>>"}
2 : <CFString 0x7fff77cdc240 [0x7fff783ebed0]>{contents = "kPCSSetupPassword"} = <CFString 0x7fff77cdc800 [0x7fff783ebed0]>{contents = "<<VALUE>>"}
}
May 18 07:04:56-MacBook-Pro.local com.apple.iCloudHelper[519] <Debug>: __PCSAccountHasStingrayIdentities
May 18 07:04:56-MacBook-Pro.local com.apple.iCloudHelper[519] <Error>: PCSHasStingrayIdentities: YES
May 18 07:04:58-MacBook-Pro.local com.apple.iCloudHelper[519] <Error>: PCSCopyStingrayIdentity: <CFData 0x7fc935046c00 [0x7fff783ebed0]>{length = 1851, capacity = 1851, bytes = 0x62820737308207330c1266656c696d65 ... 79e6cba464020101} (error: (null))
May 18 07:04:58-MacBook-Pro.local com.apple.iCloudHelper[519] <Debug>: PCSIdentityCollectionSetup: done <PCSIdentity@0x7fc933e48040 name: ****** @icloud.com pubkey: qIyzwUNtxTTxM7Pm3ajVfURE4tVl2q+PNLXBbV6nR/k= service: 1 <correctCompactKey>> BAT: 20150518170423;Mac OS X;14D136

<Email Edited by Host>

MacBook Pro with Retina display, OS X Yosemite (10.10.3), null

Any opinions on this?

Also, below are the areas I found personal files on Macs:

Show

First of all, I used the Mac supplied Text Editor to look at these files.

Second, I recommend you watch this video if you don't know how to find hidden system files:


Untitled 1 is my hard drive that has OSX on it:

untitled1/Users/<user name>/Library/ all files are in this subdirectory:

../caches/metadata/safari/History had ~20,000 entries even though I had deleted all history through browser.

../caches/org.videolan.vlc/art kept random thumbnails of videos played

../caches/com.bittorrent.utorrent this had all the .torrent files

../Application Support/utorrent all previous .torrent files

../ApplicationSupport/mobilesync/backup these are iPhone/ipod backup files like pictures and so on

../Preferences/org.videolan.plist and ../Preferences/org.videolan.LSSharedFileList list of videos watched by VLC even from a long time ago...

../Preferences/com.apple.QuickTimePlayer list of old videos watched

../Preferences/com.apple.Preview.LSSharedFileList list of pictures viewed only from last session

../Safari/HistoryIndex.sk Has lots of history even after browser shows none.

../Safari/Downloads.plist lots of old downloads from months ago.

../Cookies/.. Lots of old cookies in several files- many more than I had left in safari by choice.

I also got rid of a lot of old logs, but it seems like there is no personal stuff in them:

That is found in:

../Logs/CrashReporter/MobileDevice/... then my iPod and iPhone.

That is about it. I literally looked at almost every folder I thought that would have stuff on it, and these are the only ones that seem to. I am sure there is more stuff, but that is probably only gotten by someone more skilled than me. Like "super-hidden" files or files that I can't access.

You're not alone but I don't find anything useful from Google.

 

[Cheerful Charlie]

Sometimes, various backdoors, trojans, and other malware is set up to lie to you about such things. So it is usually the fact that get a true look at what is on a hard disk so infected or compromised needs a live CD type forsenics system that operates from memory with a known clean system that has not been compromised. I have no knowledge of any such Mac live CDs but I suspect they exist. A quick google shows there is quite a bit out there for Apple.