Hacker News Reader

“The app contains no crash reporting or analytics frameworks with the exception of the beta version that uses HockeyApp for crash reporting.” https://secureshellfish.app/privacy.html

More apps need to have a policy like this!

View on HN

My app has a similar policy: https://easygit.app/privacy/

It even has the sandbox entitlements to prove it.

I need proof first. Seen too many apps call home that say they don’t.

I've found this developer to be trustworthy, has a good track record with his git app. I'd be surprised if he would make this claim if it were untrue... it could easily be proven wrong by anyone using Charles proxy.

I'm the developer of Secure ShellFish.

You could use something like Charles for iOS to see that it doesn't connect to anything except the servers you configure.

That's not perfect btw, many apps today are using websockets (e.g. https://github.com/daltoniam/Starscream) to connect upstream and they bypass iOS/Android proxy settings entirely with no way for http based mitms to see that traffic.

Gotta fall back to wireshark for 100%.

Reply on news.ycombinator.com