Does anyone know what’s up with that? Couldn’t find anything via Google. Seems really fishy to me.
Edit: Got the official explanation from the dev on Reddit:
AutoClick Feature of JDownloader works as following. Open the browser and wait few seconds, then take screenshot and search for the Recaptcha click area and auto click on it. Screenshot is needed so JDownloader knows where to click. You can disable this feature, see https://support.jdownloader.org/de/knowledgebase/article/jd-opens-my-browser-to-display-captchas
On Linux, JDownloader creates screenshot to find out the color of tray area so it can try to find it’s tray icon and calculate the correct background color for transparency. You see the JDownloader icon having white background. You can disable this via Settings->Advanced Settings->Tray.gnometrayicontransparentenabled
Router is my own and up to date. JDownloader is installed via flatpak, which I thought I could trust. Thanks to flatpak it also doesn’t have the ability to see anything else from my system.
from the actual official site it seems it doesn’t list a flatpak source, so it might be uploaded by someone else who injected their own modifications
Flathub downloads from the official site: https://github.com/flathub/org.jdownloader.JDownloader/blob/master/org.jdownloader.JDownloader.yaml
It is unverified from the flathub page, and https://jdownloader.org/.well-known/org.flathub.VerifiedApps.txt does not point to a GUID. This is not a first party upload.
Yeah, but doesn’t flathub use the scripts in their git repository to build the flatpak? That way we can verify that everything comes from the official source without having to rely on those scripts being supplied by someone officially.