Sparkle Applications using Sparkle

**Edit: this issue has nothing to do with security. Applications are listed here just because they use Sparkle and we think they're cool.**

Sparkle website lists some Mac apps that use the framework, but this list has been compiled a while ago.

Edit: thanks for your suggestions! We've got a long list!

Here's my list:

Acorn
Adium
Bittorrent Sync
Carbon Copy Cloner
Cinch
Colloquy
Evernote
Fantastical
Fitbit Connect
Flux
Handbrake
iTerm
Karabiner
Sequel Pro
Sidestep
Slack
Transmission
Twitterrific
Vienna
Vivaldi
VLC
WebKit Nightly
Wine

Jan 20 '16 22:01 kornelski

CCMenu (https://github.com/erikdoe/ccmenu) +
Clippy (https://github.com/Clipy/Clipy) +
Clyppan (https://github.com/geoffbeier/clyppan) +
DEVONthink Pro
DuetDisplay +
Emmet plugin (https://github.com/emmetio/Emmet.sugar) +
GrowlMail (https://github.com/rudyrichter/GrowlMail) +
HipChat
ImageAlpha (https://github.com/pornel/ImageAlpha) +
iPlayer Automator (https://github.com/GetiPlayerAutomator/get-iplayer-automator) +
Mailbox
Mou +
OpenEmu (https://github.com/OpenEmu/OpenEmu)
Panda Mac (https://github.com/pablosproject/Panda-Mac-app) +
parkleDotNET (https://github.com/iKenndac/SparkleDotNET) +
ProjectPlus (https://github.com/ciaran/projectplus) +
Reggy (https://github.com/samsouder/reggy) +
SelfControl (https://github.com/SelfControlApp/selfcontrol)
SourceTree
TCMPortMapper (https://github.com/mugginsoft/TCMPortMapper) +
TeamViewer
Teleport (https://github.com/abyssoft/teleport) +
Tunnelblick (https://github.com/Tunnelblick/Tunnelblick)
Viscosity
VyprVPN
ZFS Plugin (https://github.com/Dukem/ZFS-Dumodule) +
Zulip (https://github.com/zulip/zulip-desktop)

Jan 20 '16 23:01 radekk

Jan 21 '16 00:01 balthisar

Silverlock

Jan 21 '16 04:01 kevinboo

Bit Slicer Chatology Deploymate Dropshare Hedgewars Hex Fiend Hopper Seil Textual Transmit xScope

Jan 23 '16 19:01 zorgiepoo

find /Applications -name Sparkle.framework | awk -F'/' '{print $3}' | awk -F'.' '{print $1}'

Colloquy
Cyberduck
Dashlane
Fabric
Gitter
Goofy
ImageOptim
Messenger
Mou
Quicken 2016
Slack
SourceTree
TeamViewer
UnicodeChecker
XQuartz
VLC

Jan 24 '16 05:01 jakepetroules

AirParrot 2 AppCleaner Bartender 2 CodeKit DaisyDisk DockMod FinderPath GridMount Image2Icon LiteIcon Platypus Reflector 2 Übersicht XLD

Jan 27 '16 07:01 w0lfschild

AccountEdge Pro AirServer Bartender BetterTouchTool Billings Boxer Cakebrew Capo coconutBattery Coda 2 ColorMunki Display Cornerstone CrossOver Disk Drill djay duet Go2Shell GPG Keychain HandBrake HoudahSpot Intensify Pro MacDown MAMP Money Monodraw Notational Velocity Paw PhoneView Sketch TexShop UnRarX

Jan 29 '16 21:01 nlap

DiskMaker X Fluid Mailplane 3 uTorrent

Jan 29 '16 21:01 mikemcc

0 Adium.app 1 Cyberduck.app 2 Dash.app 3 Doit.im.app 4 Evernote.app 5 HipChat.app 6 iTerm.app 7 Karabiner.app 8 Merlin.app 9 Mixed In Key 6.app 10 Screenhero.app 11 Seil.app 12 SizeUp.app 13 Sublime Text 2.app 14 TeamViewer.app 15 VLC.app

Jan 29 '16 22:01 mmlac-bv

Ones not mentioned already:

Dash
DS_Store Cleaner
KeepingYouAwake
Keka
Malwarebytes Anti-Malware
Pacifist
Skim

Jan 29 '16 22:01 DomT4

More apps:

Bitcasa iChm Keka Last.fm Paperless RescueTime

Jan 29 '16 22:01 Miguel-Alonso

More:

Marked 2 nvALT TeX Live Utility

Jan 29 '16 23:01 tergen

Inboard
Arq
Texpad
Pomotodo

Jan 29 '16 23:01 xhacker

Um, so an application using Sparkle is an Issue? Why?

I understand that some applications that use Sparkle use it insecurely, but not all do. Tunnelblick, for example, uses https: for all Sparkle traffic.

Jan 30 '16 04:01 jkbullard

@jkbullard No, you're right. Also, this thread is not related to the recent vulnerability

Jan 30 '16 04:01 zorgiepoo

Slate.app (https://github.com/jigish/slate)
TeX/BibDesk.app (https://tug.org/mactex/)
TeX/LaTeXiT.app (https://tug.org/mactex/)
TeX/TeXShop.app (https://tug.org/mactex/)
Tower.app (https://www.git-tower.com/)

Jan 30 '16 09:01 spickermann

Jan 30 '16 12:01 return

Jan 30 '16 14:01 ymhuang0808

AppZapper
BetterTouchTool
Coda 2
Colloquy
duet
Flux
HandBrake
iTerm
OpenEmu
Sequel Pro
Transmission
VLC

Jan 30 '16 14:01 Xaositek

Jan 30 '16 16:01 emma-sg

Not yet mentioned:

A Better Finder Attributes
A Better Finder Rename
Alfred
BetterZip
Big Mean Folder Machine
Clarify
CleanMyMac (update framework based on Sparkle)
Cookie
JavaApplet (/Library/Internet Plugin-Ins)
GPG Suite
iMazing (update framework based on Sparkle)
Localization Suite (Localization Manager + Localization Dictionary + Localizer)
Mactracker
Moom
MplayerX
NetSpeedy
PhotoBulk
Piezo
Posterizo
PowerPhotos
Radar
WordCounter
XliffViewer

Jan 30 '16 17:01 vitu

Not mentioned as of this writing:

TogglDesktop
Skitch (related to Evernote)

Jan 30 '16 19:01 nootrope

CD Spin Doctor (from Toast Titanium 10 app collection) DynDNSUpdater Coconut ID Geekbench Impactor IPNetMonitor X iStumbler KisMAC Malwarebytes Anti-Malware Malwarebytes Anti-Malware Service.xpc NetSpot OpenDNS Updater 3.0 PwnageTool Quicken 2007

is anyone building a list of apps that use HTTP vs HTTPS, related to the MITM vulnerability?

Jan 30 '16 20:01 pejacoby

Adium.app BibDesk.app Chicken.app CoRD.app Dragon Dictate.app GitX.app Gizmo5.app GraphicConverter.app HandBrake.app iExplorer.app Monolingual.app PwnageTool-3.1.5.app PwnageTool-4.2.app RecBoot.app rooSwitch.app SIP Communicator.app Song Surgeon 4.app StuffIt 12 TeXShop.app Timeline 3D.app Transmission.app Viscosity.app ~