twofas / 2fas-ios

Source code for 2FAS iOS app
GNU General Public License v3.0
510 stars 38 forks source link

Suspicious requests #26

Closed ghost closed 7 months ago

ghost commented 1 year ago

Every time I open the application on NextDNS I get these requests 🤔

https://imgur.com/a/VeukfBw

2fas-com commented 1 year ago

These are anonymous crashlytics that help us fix problems. If you want to disable them, you can go to the "About" section in the settings and turn them off with a toggle.

ghost commented 1 year ago

The toggle was already disabled

2fas-com commented 1 year ago

Thank you for bringing this to our attention. The option still works, and no crashlytics are sent, but we'll look into what causes these requests and whether we can block them.

valynor commented 1 year ago

Related question, what are the connections to api2.2fas.com used for?

ghost commented 1 year ago

Thank you for bringing this to our attention. The option still works, and no crashlytics are sent, but we'll look into what causes these requests and whether we can block them.

Thank you, I look forward to a resolution

2fas-com commented 1 year ago

The api2.2fas is used for our Browser Extension and notifications.

drlaserdev commented 1 year ago

I have the same issue, even though the option is disabled, the app still communicates with firebaselogging-pa.googleapis.com.

2fas-com commented 7 months ago

@ghost Could you confirm if the problem still persists? We cannot find any Firebase records. We also checked using NextDNS, as you did. I have attached two screenshots for your reference: one with 'Send anonymous crash reports' enabled and the other with it turned off.

Turned Off:

turned_off

Turned On:

turned_on