Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

I'm all for computer dating, but I wouldn't want one to marry my sister.


computers / comp.mobile.android / How can we tell if an app has GSF & Firebase spyware in it

SubjectAuthor
o How can we tell if an app has GSF & Firebase spyware in itAndy Burnelli

1
How can we tell if an app has GSF & Firebase spyware in it

<tq4iok$15bd$1@gioia.aioe.org>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=36441&group=comp.mobile.android#36441

  copy link   Newsgroups: comp.mobile.android
Path: i2pn2.org!i2pn.org!aioe.org!7Zl8kyL4yRDJ2F/5qK7Jew.user.46.165.242.75.POSTED!not-for-mail
From: spa...@nospam.com (Andy Burnelli)
Newsgroups: comp.mobile.android
Subject: How can we tell if an app has GSF & Firebase spyware in it
Date: Mon, 16 Jan 2023 22:23:28 +0000
Organization: Aioe.org NNTP Server
Message-ID: <tq4iok$15bd$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Info: gioia.aioe.org; logging-data="38253"; posting-host="7Zl8kyL4yRDJ2F/5qK7Jew.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.6.1
X-Notice: Filtered by postfilter v. 0.9.2
Content-Language: en-GB
 by: Andy Burnelli - Mon, 16 Jan 2023 22:23 UTC

How can we tell if an app has GSF & Firebase spyware in it other
than to search the code using a FOSS Google Play Store client
or via an AppManager that looks through the code for you?

Here's how I (think I) know when an app has GSF spyware included:
<https://i.postimg.cc/Jh8fJ9C7/gsf01.jpg> Apps with gsf are reported
<https://i.postimg.cc/9fhXXxSx/gsf02.jpg> AppManager analyzes the code
<https://i.postimg.cc/T27PjJLw/gsf03.jpg> Notice linked-in gms code
<https://i.postimg.cc/wjJTpKWy/gsf04.jpg> Firebase crashlytics also
<https://i.postimg.cc/0jQyRb3P/gsf05.jpg> Signatures, keys & checksums

But is there another way to tell for sure?

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor