Live data from Hacker News

Apps sending users’ data to Facebook without their consent

irishtimes.com

21–26 of 26 posts

Re: Apps sending users’ data to Facebook without their consent

#22
post #13

Apple needs to ban these SDKs from being included in apps. No one reads the privacy policies and they leak data to another party that the user doesn't have a relationship with. Provide first party services, intermediate between apps and ad networks and/or white list a handful of companies to provide these services that are audited and have separate contractual relationships with Apple. I think a good idea would be to…

The article doesn’t mention Apple. Do these apps also do this on iOS?

iOS doesn’t provide a system-wide unique ID however there is still more than enough data (WiFi network names, device name, device type, IP address, etc) that Shitbook can uniquely fingerprint a device and identify a user.

Re: Apps sending users’ data to Facebook without their consent

#23
post #13

Earlier quoted context omitted.

The article doesn’t mention Apple. Do these apps also do this on iOS?

Apple has a policy that apps (and their SDKs) must comply with IDFA, so if a user doesn't want to be tracked across the apps they use they can go to settings -> privacy -> advertising to turn off the tracking.

Doesn’t solve the issue of device fingerprinting. There are a lot of data points that can be used to create a near-unique fingerprint of a device.

Re: Apps sending users’ data to Facebook without their consent

#24
post #10
post #7

So let's see here. There are apps that people download which, in a way, replicate themselves by enticing other people to download them often using some form of psychological engineering. These apps then compromise the person's data by streaming it to a server. The word "app" is frequently used, but these sound more like computer viruses with a friendly UI, no?

A virus self replicates without human interaction.

No, worms do that. Viruses must be spread. But of course, you can have hybrids, such as WannaCry.

Re: Apps sending users’ data to Facebook without their consent

#26
post #17
post #6

Earlier quoted context omitted.

Check out NetGuard: https://f-droid.org/en/packages/eu.faircode.netguard/

Too bad it works by creating a local VPN - I'm already using "Block This!" to block ads on my device which also works via a VPN, so you can't use both at the same time.

I wonder if it's possible to create an app that creates a local VPN that routes through the other VPNs.
Post reply on HN