The dude puts spyware in the app then gives me a whole spiel about how it's google's standard practice & makes shit up then calls me a para schizo for whistleblowing his app.
The dude adds google api activity & stores your nsec into the google password manager, profile install receiver which is used by permission dump which is a dangerous permission to have it accesses system level files & what not. The dude says the app don't use it but the permissions there while i've seen other apps not have the permission at all.
The dude claims it's for adb logcat which can be done through adb not needing the permission at all. The app doesn't need google api or storing your password nsec in google. Everything i've mentioned could be removed it wouldn't impact the app but he don't want to.
So fuck him & the zap store does not scan apps or any method to protect the user so anyone can just put malicious spyware appd in zap store it's all good.
Vyram Kraven
npub1k0…0zyu9
2026-08-12 06:05:22 UTC
in reply to nevent1q…932g
Author Public Key
npub1k06ctulq8rcaen067tt6z3y6gxrqtsuje5em5lcn009zfpp0t7gqf0zyu9Published at
2026-08-12 06:05:22 UTCEvent JSON
{
"id": "b0bf2696433ed509e8e48deb7ccd5de9de63455a397fbd4f2eb0af1352f316cf",
"pubkey": "b3f585f3e038f1dccdfaf2d7a1449a418605c392cd33ba7f137bca24842f5f90",
"created_at": 1786514722,
"kind": 1,
"tags": [
[
"alt",
"A short note: The dude puts spyware in the app then gives me a w..."
],
[
"e",
"dbe13e87a472c9f35caabc938165562fd3fe92f843e5bab3c0c157e4646188cb",
"wss://relay.momostr.pink/",
"root",
"b3f585f3e038f1dccdfaf2d7a1449a418605c392cd33ba7f137bca24842f5f90"
],
[
"e",
"c26d8d77629cebcb424aeddb6200dc614241ca9d648618bdcf0d4363b14c055d",
"wss://relay.ditto.pub/",
"reply",
"ad8cebbce8203aa7ab7ec9e8cea16670664fcd1c6944e6a3c41fdf26e4b0b1fa"
],
[
"p",
"b3f585f3e038f1dccdfaf2d7a1449a418605c392cd33ba7f137bca24842f5f90",
"wss://nostr.bitcoiner.social/"
],
[
"p",
"ad8cebbce8203aa7ab7ec9e8cea16670664fcd1c6944e6a3c41fdf26e4b0b1fa",
"wss://relay.primal.net/"
],
[
"client",
"Amethyst"
]
],
"content": "The dude puts spyware in the app then gives me a whole spiel about how it's google's standard practice \u0026 makes shit up then calls me a para schizo for whistleblowing his app.\n\nThe dude adds google api activity \u0026 stores your nsec into the google password manager, profile install receiver which is used by permission dump which is a dangerous permission to have it accesses system level files \u0026 what not. The dude says the app don't use it but the permissions there while i've seen other apps not have the permission at all.\n\nThe dude claims it's for adb logcat which can be done through adb not needing the permission at all. The app doesn't need google api or storing your password nsec in google. Everything i've mentioned could be removed it wouldn't impact the app but he don't want to.\n\nSo fuck him \u0026 the zap store does not scan apps or any method to protect the user so anyone can just put malicious spyware appd in zap store it's all good.",
"sig": "089ee51fcefad18134fc47de9f861415b094358a6ef46a8631480a55215c05bbe1cb563b9b0cb7555643a36418f7adafaaf661bda238c49ca26151f0a49715c3"
}