Repository navigation
Applications using Sparkle #717
Description
Activity
- CCMenu (https://github.com/erikdoe/ccmenu) +
- Clippy (https://github.com/Clipy/Clipy) +
- Clyppan (https://github.com/geoffbeier/clyppan) +
- DEVONthink Pro
- DuetDisplay +
- Emmet plugin (https://github.com/emmetio/Emmet.sugar) +
- GrowlMail (https://github.com/rudyrichter/GrowlMail) +
- HipChat
- ImageAlpha (https://github.com/pornel/ImageAlpha) +
- iPlayer Automator (https://github.com/GetiPlayerAutomator/get-iplayer-automator) +
- Mailbox
- Mou +
- OpenEmu (https://github.com/OpenEmu/OpenEmu)
- Panda Mac (https://github.com/pablosproject/Panda-Mac-app) +
- parkleDotNET (https://github.com/iKenndac/SparkleDotNET) +
- ProjectPlus (https://github.com/ciaran/projectplus) +
- Reggy (https://github.com/samsouder/reggy) +
- SelfControl (https://github.com/SelfControlApp/selfcontrol)
- SourceTree
- TCMPortMapper (https://github.com/mugginsoft/TCMPortMapper) +
- TeamViewer
- Teleport (https://github.com/abyssoft/teleport) +
- Tunnelblick (https://github.com/Tunnelblick/Tunnelblick)
- Viscosity
- VyprVPN
- ZFS Plugin (https://github.com/Dukem/ZFS-Dumodule) +
- Zulip (https://github.com/zulip/zulip-desktop)
find /Applications -name Sparkle.framework | awk -F'/' '{print $3}' | awk -F'.' '{print $1}'- Colloquy
- Cyberduck
- Dashlane
- Fabric
- Gitter
- Goofy
- ImageOptim
- Messenger
- Mou
- Quicken 2016
- Slack
- SourceTree
- TeamViewer
- UnicodeChecker
- XQuartz
- VLC
Reacted by Brenden Suarez and Will HanAirParrot 2
AppCleaner
Bartender 2
CodeKit
DaisyDisk
DockMod
FinderPath
GridMount
Image2Icon
LiteIcon
Platypus
Reflector 2
Übersicht
XLDAccountEdge Pro
AirServer
Bartender
BetterTouchTool
Billings
Boxer
Cakebrew
Capo
coconutBattery
Coda 2
ColorMunki Display
Cornerstone
CrossOver
Disk Drill
djay
duet
Go2Shell
GPG Keychain
HandBrake
HoudahSpot
Intensify Pro
MacDown
MAMP
Money
Monodraw
Notational Velocity
Paw
PhoneView
Sketch
TexShop
UnRarXDiskMaker X
Fluid
Mailplane 3
uTorrent0 Adium.app
1 Cyberduck.app
2 Dash.app
3 Doit.im.app
4 Evernote.app
5 HipChat.app
6 iTerm.app
7 Karabiner.app
8 Merlin.app
9 Mixed In Key 6.app
10 Screenhero.app
11 Seil.app
12 SizeUp.app
13 Sublime Text 2.app
14 TeamViewer.app
15 VLC.appOnes not mentioned already:
- Dash
- DS_Store Cleaner
- KeepingYouAwake
- Keka
- Malwarebytes Anti-Malware
- Pacifist
- Skim
More apps:
Bitcasa
iChm
Keka
Last.fm
Paperless
RescueTimeMore:
Marked 2
nvALT
TeX Live Utility- Inboard
- Arq
- Texpad
- Pomotodo
Um, so an application using Sparkle is an Issue? Why?
I understand that some applications that use Sparkle use it insecurely, but not all do. Tunnelblick, for example, uses https: for all Sparkle traffic.
@jkbullard No, you're right. Also, this thread is not related to the recent vulnerability
121 remaining items
My apps which use Sparkle:
Cookie 5
Cookie
WiFiSpoof
Invisible
Privatus
eMail Address Extractor
Hidesall current versions use https for updating
I updated GraphicConverter 9 and CADintosh today.
Both use now the latest Sparkle and https.5KPlayer - http://www.5kplayer.com
Software - https://software.com/mac/
StuffIt Destinations - http://my.smithmicro.com/stuffit-deluxe-mac.html
Window Tidy - http://www.lightpillar.com/window-tidy.html
Zenmate VPN - https://zenmate.com@jakepetroules thanks for the terminal command. I always have 'Malwarebytes Anti-Malware' twice.
I have checked, only one app.I found why with the cmd:
find /Applications -name Sparkle.framework | awk -F'/' '{print $(NF-3)}'Malwarebytes Anti-Malware.app
Malwarebytes Anti-Malware Service.xpcAny updates on..?
.Knock
.Malwarebytes
.TunnelBear
.SmoothMouseThanks in advance!
How about the apps Arthur, Viscosity, ClipMenu?
Not obviously vulnerable (current stable version only)
- Adium
- BibDesk
- Boxer
- Bartender 2
- Bodega (abandoned, still useful for Sparkle version update detection)
- Boxcar
- ClipMenu (abandoned? open-source)
- coconutBattery
- Cyberduck
- Dash
- Expandrive
- Flux
- GPGTools Suite (GPG Keychain, GPGPreference, GPGMail_Updater, MacGPG2_Update, etc.)
- Hands Off!
- Handbrake
- iFunBox
- iTerm 2
- TechSmith Jing
- Jitsi
- Karabiner
- LaTeXiT
- Lingon X
- Mou (abandoned?)
- Pacifist
- Reveal
- Seil
- Shady (abandoned? and open-source)
- SourceTree
- TeX Live Utility
- TeXShop
- Toast Titanium
- TotalFinder
- Transmission
- Transmit
- VLC (Sparkle framework updated, appcast uses http:// but downloads are signed)
- VLC Setup (not VLC)
- XQuartz
Could be vulnerable / unreachable appcast
- Breakaway (abandoned? and open-source)
- Kismac NG (abandoned?)
- UnRarX (abandoned?)
Sparkle for the MacOS Application TeXShop has the subobtimal habit of accumulating what to appear old versions of TeXShop in a folder /Users/username/Library/Application Support/TeXShop/.Sparkle (where "username" is a placeholder). In my case, these (40!) old versions unnecessarily occupy a total of ~3.5GB. IMHO, this state of affairs should be optimised (at most 3 old versions should be kept).
@simonkramer The accumulation of copies in application support has been fixed a while ago. It'll stop happening when the app updates to the current version of Sparkle.
The syncthing-macos project uses Sparkle
Edit: this issue has nothing to do with security. Applications are listed here just because they use Sparkle and we think they're cool.
Sparkle website lists some Mac apps that use the framework, but this list has been compiled a while ago.
Edit: thanks for your suggestions! We've got a long list!
Here's my list: