thams One click to your favorite app en-US Wed, 19 Jun 2013 20:16:35 +0000 http://bbpress.org/?v=1.0.3 q http://www.clicktoapp.com/forum/search.php http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-1681 Tue, 12 Feb 2013 12:35:49 +0000 nachoe 1681@http://www.clicktoapp.com/forum/ <p>Hi thams, don't trust this people. The current version of the app (1.2.95) is almost a year old and it is abandoned. This people don't care for the app or its users, you better look for another alternative.</p> <p> The worse thing is I saw they put this half-baked piece of abandonware on sale in the Mac App Store for 10€! </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-1642 Wed, 19 Dec 2012 19:02:40 +0000 thams 1642@http://www.clicktoapp.com/forum/ <p>Not fixed as of last Mac version. I will publish this as a security risk of the click-to app. </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-631 Sun, 24 Jun 2012 23:35:39 +0000 thams 631@http://www.clicktoapp.com/forum/ <p>Thank you. </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-625 Thu, 21 Jun 2012 07:34:41 +0000 Anonymous 625@http://www.clicktoapp.com/forum/ <p>Hi thams,</p> <p>I am sorry, I was referring to the Windows version of click.to.<br /> We tested the Mac version of click.to again and you are right!</p> <p>We will fix this in the next couple of days.</p> <p>I will announce the update here! </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-624 Wed, 20 Jun 2012 00:06:18 +0000 thams 624@http://www.clicktoapp.com/forum/ <p>Here is a demonstration.</p> <p><a href="https://skitch.com/e-thams/ebh8q/untitled-2" rel="nofollow">https://skitch.com/e-thams/ebh8q/untitled-2</a></p> <p>Shall I publish this privacy vulnerability widely, to save others from being victimized? </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-614 Thu, 14 Jun 2012 19:24:43 +0000 thams 614@http://www.clicktoapp.com/forum/ <p>It is easy for me to observe... when click.to is running, I copy a URL that points to my own server. I can see the call immediately in that server's log files.</p> <p>When I stop click.to, the behavior stops.</p> <p>Note: I do not need to do anything other than cmd-c (copy) in order to cause this behavior. (I.e., I don't need to select one of the click.to pop-up choices for this to happen). </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-613 Thu, 14 Jun 2012 09:07:38 +0000 Anonymous 613@http://www.clicktoapp.com/forum/ <p>Hi thams,</p> <p>Sorry for the late reply!</p> <p>We can assure you that click.to does not make any hidden/silent HTTP calls!<br /> What makes you think that click.to performs these calls? </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-604 Mon, 11 Jun 2012 22:32:06 +0000 thams 604@http://www.clicktoapp.com/forum/ <p>No response? click.to? are you there? </p> http://www.clicktoapp.com/forum/topic/privacy-issue-copy-invokes-url#post-564 Fri, 11 May 2012 18:16:38 +0000 thams 564@http://www.clicktoapp.com/forum/ <p>YIKES! If you copy a URL while click.to is active, it silently makes an HTTP call to the URL!</p> <p>This is bad for several reasons:</p> <p>* Imagine that you wanted to copy/paste a URL from one document to another without someone knowing it.</p> <p>* Imagine you are a software developer and you are testing your servers... merely copying the URL would invoke the servers and screw up your results if you didn't realize click.to was doing this.</p> <p>How do I disable this?? </p>