51–60 of 188 posts
Earlier quoted context omitted.
It would be less creepy if they actually asked the user if they want to upload those system files before uploading them.
I wonder how many users would understand what these files are, why Facebook might want them, and what the risks are associated with sending these.
Aside from fingerprinting, what other nefarious uses could this have in theory?
You can identify devices with vulnerable libraries and do targeted attacks.
This is the biggest one for me. Anyone who has that data is capable of playing back the 0-days that affect android. How many android phones are kept out of date?
As other user mentioned, the Android ecosystem is like the Wild West. Given there's a report for 2.5B active devices, how many can be affected by such an attack?
1% would affect 25M devices, around the population of Australia. 10% - 250 million devices. 40% - 1 billion devices...
How does the internal culture at FB come to grips with the world's vision of them as creepy and amoral and still do stuff like this anyway?
Earlier quoted context omitted.
It would be less creepy if they actually asked the user if they want to upload those system files before uploading them.
I wonder how many users would understand what these files are, why Facebook might want them, and what the risks are associated with sending these.
What are the risks?
I was going to say this isn’t a big deal but copying and uploading the libraries is actually illegal (copyright violation) and users likely can’t even consent to this even if it is in the Facebook ToS as many android phones contain proprietary libraries not licensed for redistribution. The creators of those various libraries should have a valid legal case against Facebook here, if they want to exercise it. I doubt an…
How does the internal culture at FB come to grips with the world's vision of them as creepy and amoral and still do stuff like this anyway?
i was looking around to find lore regarding sandboxing android apps, so far i found this interesting: https://www.reddit.com/r/androidapps/comments/5n7ak9/any_app... And this too: https://www.gtricks.com/android/how-to-sandbox-android-apps-...
As other commenters have mentioned, traditional sandboxing mechanisms would do little here. Applications are always given read access to system libraries because they need them to function.
I was going to say this isn’t a big deal but copying and uploading the libraries is actually illegal (copyright violation) and users likely can’t even consent to this even if it is in the Facebook ToS as many android phones contain proprietary libraries not licensed for redistribution. The creators of those various libraries should have a valid legal case against Facebook here, if they want to exercise it. I doubt an…
Some older android devices running newer lineage/AICP/etc builds include a few libraries I wrote (in their entirety) for compatibility of old vendor prebuilts with new android versions - libdgv1 & libdmitry. Maybe I should C&D FB for laughs?