Hacker News new | ask | show | jobs
by basdp 2547 days ago
I need proof first. Seen too many apps call home that say they don’t.
2 comments

I'm the developer of Secure ShellFish.

You could use something like Charles for iOS to see that it doesn't connect to anything except the servers you configure.

That's not perfect btw, many apps today are using websockets (e.g. https://github.com/daltoniam/Starscream) to connect upstream and they bypass iOS/Android proxy settings entirely with no way for http based mitms to see that traffic.

Gotta fall back to wireshark for 100%.

I've found this developer to be trustworthy, has a good track record with his git app. I'd be surprised if he would make this claim if it were untrue... it could easily be proven wrong by anyone using Charles proxy.