search

JadenGeller / Helium

A floating browser window for OS X
MIT License
3.58k stars 240 forks source link

Quick Question: Is the Helium App secure for entering Passwords to Video Websites? #235

Open clikdude opened 7 years ago

clikdude commented 7 years ago

I had to enter a password for Netflix, and Amazon Video, and am unsure as to whether or not they were sent securely via HTTPS. Also, not aware of whether or not there are any keystroke capture commands within the app, sending it elsewhere.

Is there a way to achieve trust and assurance with this app? Thanks.

encodi commented 6 years ago

@clikdude I see in the code they're using a simple webview and that actually handles https, and I don't see anything suspicious like keystroke capturing, actually it wouldn't be accepted by apple review if it had that within the app.

Since the app is in the apple store, apple review is your assurance.

slashlos commented 6 years ago

No key stroke capture of any kind I'm aware of. Btw, Helium 3 is muti window ./ webview.