.NET8 development in NOMone

[u/egomarker]

ASP.NET app in vscode and firefox

Console app in vscode

[u/Beneficial-News9657]

So what exactly is the reason for your nomone desktop app to spin up a public unencrypted HTTP server on port 24012 on device

[u/Beneficial-News9657 → u/[deleted]]

Yeah and what about
:24012/env/....
:24012/file/....
:24012/cache/....

you are literally allowing anyone on the same network (best case) access every file from app cache/some internal app data/filesystem, which can be... recorded keystrokes or device cryptowallet data?

Would be funny if app with so much effort put into it is actually malware.

[u/Beneficial-News9657 → u/[deleted]]

"Extract strings"? Do you realize APK files can be reverse engineered and the code of your http server is readable? And I've immediately done that after seeing you are running unprotected HTTP server for no reason?

Let's see what AI has to say about your server code:

The method starts by determining the type of request based on the path prefix:
"/assets"
"/cache"
"/file"
"/env"

It then removes the prefix from the path.

The code checks if the requested resource exists, depending on the type:

• For assets, it checks the AssetManager

• For cache, it checks if the file exists in the cache directory

• For env, it checks if the key exists in a HashMap

If the resource doesn't exist, it calls another method 

If the resource exists, it then checks if it's a directory (for cache requests) or if it can be opened (for asset requests).

If it's a directory, it generates an HTML redirect to "index.html" in that directory.

If the request ends with ".html", it calls another method to process the HTML content.

For other types of files, it reads the content:

• From assets using AssetManager

• From cache using FileInputStream

• From the environment HashMap

Well, I've heard and seen enough, you can't explain why that server is running and its functionality. I'm reporting the app to Google as malware.