Hey can you guys seriously do something about verifying apps before letting them be published into zapstore? Every app I inspect after downloading has some google spyware hidden api activity, metadata holder by google & other crap that shouldn't be there. I don't want to have to keep inspecting apps after downloading them then uninstall the app & have to hunt down these devs to hound them about this shit. Then get retarded answers like it's standard practice because newbie dev thinks google hidden api activity is standard because GOOGLE REQUIRES IT IN ORDER TO BE LISTED IN THE PLAY STORE! The whole point we seek alternative stores like f-droid & zapstore is to try apps without googles crap in it. How could I recommend zapstore to anyone when you aren't protecting the users? So far i've had to hound team soapbox because the crap was in the Armada app now removed but that same crap is in Tenna. I am assuming it's in all of soapbox's apps published in zapstore after seeing it in 2. Just look! Anyone can use a type of app inspector app & see these inside the app. You can't just be letting any app into the store because hey it's for nostr I really need you to step it up zapstore.

Replies (33)

I'm working on exactly this for v2, a security/privacy report. No we will not take down apps unless they violate our catalog terms. It is also your responsibility to check. And yes this shit is hard to do with little resources.
Cool that you are working in a requirement list before submitting. I do not agree with it's the users responsibility to check. It's the stores responsibility to check before they publish other's apps if you try to force that on the user then you may just end up with bad reviews all over. F-droid checks before letting an app be published on it's repo I would follow that. Need more resources try that zap campaign nostrich.org Or just post more on your npub about how your going to protect the user & need support. Value4value people will reach because they want zapstore to succeed don't you?
It's an impossible problem. If I check and remove apps I will be called a censor. So this is the tradeoff we chose: users responsibility. If you don't like it, more than welcome to run your own catalog. This is an open spec. Try making a living with value for value, good luck.
It's not impossible it's simple. You wouldn't be called a censorer for removing malicious apps or google spyware embeded ones because you want open source apps that are clean & not being invasive to the user. Are you trying to tell me you like spyware or are just waiting till someone publishes a malicious app that steals btc to start wanting to protect the people? Run my own catalog sure make an app that makes it easy & I will. Making a living with v4v that's what the nostr network is all about if you don't believe in it then why are you even here? We have users who already live comfortably off of v4v because they put the work in everyday building up their values. I hope you reconsider because if I noticed & said something eventually others will too it's only a matter of time.
1) it's not simple 2) i don't like spyware but it's not clear cut and yes i will be censoring 3) malicious apps have gone into google play, i can't possibly stop everything 4) i'm not here to "protect the people", i do what i can 5) "make an app that makes it easy": how about you put some effort? 6) making a living with v4v is a pipe dream and not what nostr is about
1. I'm sorry to hear that it's very difficult for you. 2. It is very clear cut you inspect the app & you see it then let them know hey this is being removed because of so & so until you remove this your app has been depublished. 3. Okay & you haven't tried yet to say it's hard before even trying is moot. 4. I appreciate you admitting you don't care about what gets published as long as you make a name for yourself that's what matters to you. 5. Nah the whole point is to give it to the people & it should be easy that's apart of being decentralized if everyone has to make tremendous effort when it should be easy well the decline will continue. People will just get off the pointless internet driven by ai ad spammers & devs who openly admit they don't give a damn about their userbase. 6. It's not for Derek, Matt, Vitor, & other developers maybe it's a pipe dream for you because your not making a better effort here which is case & point. Actually v4v is the point of nostr not decentralization we had that long before nostr with other foss softwares so saying it's only about decentralization is moot because every single alternative invented is about decentralizing from the central places.
Run my catalog with my opinion it's not an opinion to have a standard to protect the users from malicious intent, invasive, or intrusive products that do more then what they say in their descriptions. Thanks for letting me know how unimportant that is to you.
Bro 😅 Let's not get into a silly argument. I can tell you are young. Obviously we all want perfect apps, no malware, no tracking, easy and free. Life doesn't work like that. There are tradeoffs to make. And everyone has their opinion. I'll give you an example: I could ban all apps that don't use Tor because privacy, right? Well, that would be excluding everyone in Cuba. Is that the right decision? If you like that model use Play Store or F-Droid. I choose to keep most things and give users the option because not everything is clear cut. You disagree? Run your own catalog. You can't reasonably come here demanding things for free and not even being grateful. This shit is incredibly hard to build. Derek, Matt, Vitor... do you really think they live off v4v? Making a name for myself is all I care about 😂. Dude I'm a nobody and I'm working my ass off for 10x less pay than in fiat land.
It is certainly an opinion. I said we're working on warnings for potential anti-features. You'll be able to read 2 sentences and decide whether to install or not.
"we should allow spyware and malware from the zapstore because if you disagree you must be young" Is this the most retarded argument I've seen on nostr? No, far from it.
When you believe there is no nuance, and that an ideal product should be handed to you for free, right now, and without any effort from your part, it means you have little experience dealing in the real world. So it has to do with being young, but there could be other reasons.
Fran when you create excuses for others it means your a kiss ass. Here we go with all the stupid assumptions i'm not going to debunk you point by point because you obviously don't get what a standard practice is when it comes to safety & procedures. The real world as you put it doesn't tolerate slop which is minimal effort with no regard to the userbase or call them consumers. The idea that damage has to be done first & you have to start losing traction after bad publicity in order to start doing the right thing is ridiculous. What I see fran is you have next to none experience with the world because of how you responded. F-droid takes proper caution by inspecting the apps then building them themselves & making sure it fits not being malicious before publishing to it's repo. Yes they do have some stuff labeled with anti-features for apps with proprietary components but they make the effort they don't just allow any app to go in so they can make a name for themselves. Sure you want to argue time, effort, resources hey it's a fucking economy start charging devs to list in your repo. Oh if you do they might make their own store or list their own repos in f-droid or other stores welcome to the world where most people give shit for free because nobody pays for it. Hey did you notice so far every nostr apps been free & you haven't purchased a client yet? What's your ideology shit effort should be free while standardized effort & practices which is fair & for all should be charged for? Instead of wasting time fran why don't you think about ways more people can be given an incentive to give people more then 21 sats. Imagine in the real world if you tipped people 2 pennies for everything? You'll get dirty looks for sure hell you might even get your ass kicked & then called a cheapscape.
Your own incompetence has nothing to do with my age. No I don't think people should be sold spyware apps and told they're not, that's dishonest scammer behaviour. In the real world that shit would get you stabbed to death, but all you cowards hide behind the internet
Agreed Kanye I see it all the time they be like you can't give me feedback or disapproval unless you develop yourself or are a paying subscriber. Feedbacks feedback take it or leave it but the people will say it that's the freedom of expression.
Not at all. Don't confuse a demand with an entitled attitude as "feedback". I hate spyware, spam and scams as much as you. I'm working on ways to mitigate it. You have zero claims on what I do with my time, is that not clear? You're welcome again if you ask kindly. End of conversation.
All of these on Zapstore. FDroid, that you brought up, has a veeery slow and laborious process to publish one's app in their repo. Surely they do great work, but it's a chore just to publish one app. Imagine 10.
The point of it being slow is there's a queue & it's a process to inspect an app. Which it should be slow not rushed that's normal & nothing wrong with it.
I actually inspected all of your apps & @LWB i'm actually proud of you. You really don't have google components in your apps. I appreciate that & you could teach the people at team soapbox how to not put google shit in all their apps.
You thought correctly there is good intentions. It doesn't matter how I sound to you what matters is I been posting pictures proving that the spywares in there. Since you been reading those comments or maybe you haven't go look at the links to the pictures. That's the only thing that matters not if I sound polite or nasty. You use Tenna right? image Now that I said something about it they removed the google shit in there. Look at a pic of the latest version now. image If I didn't say something you would still have that shit in Armada, Tenna, & any other app they made. Now because I spoke up they will probably check every app they make & remove it since I found out last night these apps are vibe coded from a script. If I didnt do this when were you going to think @NetSavior let me inspect the app before I try it to make sure theres no unusual stuff in it?
Default avatar
Tojpiendo 1 week ago
Google, appstore, las IAs antropic openia,etc son spyware, o se comportan como tal, porque no veo que vaya donde sus desarrolladores a criticarles y putiarlos? A no puede porque son directamente cerrados🤔. Luego porque no usted mismo crea alguna herramienta para analizar apps de zapstore para encontrar spyware,cosas que rompen la privacidad,etc y lo libera de codigo libre a la comunidad para que los usuarios lo usen de manera sencilla, y no este ahi simplemente pidiendo cosas
↑