I suppose that it was not malicious. However, backdoor has costs, which was me. I do not support using a server which can have settings changed by remote control! NO!!!!
those 2 lines, while inside the "settings" files, are not settings. You can tell it by the fact that you never set them
It's just a way to save such information, i couldn't find a better place.
Nonetheless, the same feature can actually be controlled by the user using the "external-ip-server".
This is a real "setting" despite the fact that HFS offers no GUI for it and you have to set it in the file yourself. Indeed, HFS is not going to change that line like the others I pointed.
This being said, I want to point the fact that this problem was caused not by my changes, but it's a bug in HFS, all versions, that will be fixed in next release.
My change in the updated list was correct, but triggered the bug.
So, blame the bug, and let's fix the bug. Anyone can decide to not use the feature, if necessary.
And well, even when I fix this bug, I won't put the problematic list online again, because some people will still use old versions, and I don't want them to have these problems.
But it's good to fix it anyway.
The term "backdoor" doesn't apply to this situation, and it would hardly make sense in an open source project anyway.
Most software uses a central server for updates and possibly other things.
HFS needs a central server for few optional features, that you can not use or disable.
Sorry if I was long here but I hope I've been clear at least.