Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Sudo Sodium  ( chottomatte@lemdro.id )  to Free and Open Source SoftwareEnglish ·
edit-2
2 years ago

GravyScanner : a FOSS Android app that reveals installed apps involved in Gravy Analytics data breach

github.com

external-link
message-square
29
link
fedilink
  • cross-posted to:
  • opensource@lemmy.ml
61
external-link

GravyScanner : a FOSS Android app that reveals installed apps involved in Gravy Analytics data breach

github.com

Sudo Sodium  ( chottomatte@lemdro.id )  to Free and Open Source SoftwareEnglish ·
edit-2
2 years ago
message-square
29
link
fedilink
  • cross-posted to:
  • opensource@lemmy.ml
GitHub - steffandroid/gravy-scanner: Android app that reveals installed apps which may be leaking your location data via Gravy Analytics
github.com
external-link
Android app that reveals installed apps which may be leaking your location data via Gravy Analytics - steffandroid/gravy-scanner
alert-triangle
You must log in or # to comment.
  • seang96 ( seang96@spgrn.com ) 
    link
    fedilink
    arrow-up
    6
    ·
    2 years ago

    Outlook is my only offender… Kinda out of luck there.

    • Sudo Sodium  ( chottomatte@lemdro.id ) OP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      What about using web version? Are there any limitations compared to the app?

      • seang96 ( seang96@spgrn.com ) 
        link
        fedilink
        arrow-up
        1
        ·
        2 years ago

        Notifications come to mind.

        • Sudo Sodium  ( chottomatte@lemdro.id ) OP
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          I’m not sure but isn’t there a notification permission for the site on browser?

          • seang96 ( seang96@spgrn.com ) 
            link
            fedilink
            arrow-up
            2
            ·
            2 years ago

            Firefox does but I also am using a more private version so it doesn’t have google FCM push so it’d drain battery more and poll slower and generally I’ll need to see notifications ASAP when I enable it. Most of the time I don’t let outlook run though.

            • Sudo Sodium  ( chottomatte@lemdro.id ) OP
              link
              fedilink
              English
              arrow-up
              2
              ·
              2 years ago

              Unfortunately all other solutions are either less private (like using a browser that supports FCM only for outlook), or need a self-hosted server (like using Gotify Android app)

  • ISOmorph ( ISOmorph@feddit.org ) 
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    Needs some more cooking. Boots into a white page with nothing on it for me.

    • MrTolkinghoen ( MrTolkinghoen@lemmy.zip ) 
      link
      fedilink
      English
      arrow-up
      15
      ·
      2 years ago

      That means you’re clear and don’t have any offending apps.

  • jarfil ( jarfil@beehaw.org ) 
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    6 pages of apps… nice. 😅

    Now, seriously. Android 14 on a Samsung phone, lets me select “location: only while using the app”. I close apps when not using them, and limit notifications so they don’t get auto-started at random. Unused app detection, puts them in “deep sleep” which doesn’t allow them to run at all, and strips them of all permissions.

    This scanner, would be more useful if it also checked which apps have the location permission enabled, and are frequently used.

  • Auyx ( Auyx@lemmy.zip ) 
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 years ago

    Podcast Addict, bummer I use that daily. Any way to block the leak without ditching the app?

    • Sudo Sodium  ( chottomatte@lemdro.id ) OP
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      IIRC leak already happened and hackers already have the data now

  • Chahk ( chahk@beehaw.org ) 
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    Yahoo Mail (don’t judge me) and Viber are the only ones that I still need to use, but don’t see why they’d need the location permission. If I deny location permission to those apps, will that stop the leaking?

    • MrTolkinghoen ( MrTolkinghoen@lemmy.zip ) 
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      My… Guess is that it’s still another data point attaching your IP to you. I haven’t really dug into how true that would be, but there is def fingerprinting stuff that could be shared without location permission. I.e. just a web request gives them your phones ip. Now that might be your cellphone wan ip, That might be your home ip etc… still identifying info.

      Imo this isn’t so much about tracking your literal location (though, that too) but also in tracking you across websites without permission.

  • Hellfire103 ( hellfire103@lemmy.ca ) 
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 years ago

    Man, I had no idea Tumblr was on the Gravy list. Great app!

    • Ricky Rigatoni ( rickyrigatoni@lemm.ee ) 
      link
      fedilink
      arrow-up
      1
      ·
      2 years ago

      Tumblr is wpa enabled. Use that.

      • Hellfire103 ( hellfire103@lemmy.ca ) 
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        I’m not sure I understand.

        • Ricky Rigatoni ( rickyrigatoni@lemm.ee ) 
          link
          fedilink
          arrow-up
          1
          ·
          2 years ago

          If you navigate to Tumblr on firefox or chrome, there will be an option to add it to your home screen and when you launch it from there it behaves just like the app would except without tracking and your privacy-focused browser addons will work, including ublock.

          • Hellfire103 ( hellfire103@lemmy.ca ) 
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            Oh, PWA. Yeah, I used that for a bit, but the experience wasn’t great.

  • MrTolkinghoen ( MrTolkinghoen@lemmy.zip ) 
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 years ago

    Had no idea Textra was on here. I guess back to stock graphene OS messenger.

    • PsychoMan ( PsychoMan@mander.xyz ) 
      link
      fedilink
      arrow-up
      1
      ·
      2 years ago

      I’d suggest qksms instead. Moved to it from textra and works very well.

      • jinwk00 ( jinwk00@lemm.ee ) 
        link
        fedilink
        English
        arrow-up
        6
        ·
        2 years ago

        Long unmaintained, use QUIK instead which is a successor

        • MrTolkinghoen ( MrTolkinghoen@lemmy.zip ) 
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          Thanks for the rec. Ngl for something like sms though, maybe not maintained isn’t a problem. Heh as long as it doesn’t have any bugs, not like the protocol is changing

          • jinwk00 ( jinwk00@lemm.ee ) 
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 years ago

            True, but app vulnerability could be a thing so I tend to get ones that still have some maintainers

  • Ricky Rigatoni ( rickyrigatoni@lemm.ee ) 
    link
    fedilink
    arrow-up
    3
    ·
    2 years ago

    Bejeweled 3 has forsaken me.

  • knokelmaat ( knokelmaat@beehaw.org ) 
    link
    fedilink
    arrow-up
    3
    ·
    2 years ago

    Crunchyroll, can weebs not stay in their bedrooms privately??

    Also, 2dehands, which is the biggest second hand buying / selling site and app of Belgium. Quite a big one!

  • 𝕸𝖔𝖘𝖘 ( 01189998819991197253@infosec.pub ) 
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 years ago

    Blank white screen on the personal profile (woot).

    Outlook only on the work profile (only has notification access and nothing else). I’m actually surprised Teams isn’t on that list, but ok.

  • TxzK ( TxzK@lemmy.zip ) 
    link
    fedilink
    arrow-up
    2
    ·
    2 years ago

    Almost read it gay scanner

    • jarfil ( jarfil@beehaw.org ) 
      link
      fedilink
      arrow-up
      1
      ·
      2 years ago

      “Your phone is not gay enough… here are some themes and backgrounds to make it more fun!”

      (probably not PC, but that could be a fun app)

  • sunglocto ( sunglocto@lemmy.dbzer0.com ) 
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 years ago

    One single app: some random pizza making game I installed because I saw someone playing it in school. None in the work profile, suprisingly

Free and Open Source Software

foss

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !foss@beehaw.org

If it’s free and open source and it’s also software, it can be discussed here. Subcommunity of Technology.


This community’s icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 31 users / day
  • 178 users / week
  • 830 users / month
  • 2.1K users / 6 months
  • 3.47K local subscribers
  • 23K subscribers
  • 1.28K Posts
  • 16K Comments
  • Modlog
  • mods:
  • Gaywallet (they/it) ( Gaywallet@beehaw.org ) 
  • alyaza [they/she] ( alyaza@beehaw.org ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code