You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
i have been seeing some of these signatures "package defpackage" and they do things like this:
import com.facebook.FacebookSdk
and
import android.media.AudioRecord;
they tend to have obfuscated class names, such as:
public static final aeyd a = aeyd.a("aasl");
and generally seem to be doing a lot of things that would ordinarily be of interest to Exodus in terms of tracking etc, which makes me think that the generic defpackage name is being used as a way of bypassing signature detection and allowing multiple sdks to be incorporated into an app via this single signature.
i have been seeing some of these signatures "package defpackage" and they do things like this:
import com.facebook.FacebookSdk
and
import android.media.AudioRecord;
they tend to have obfuscated class names, such as:
public static final aeyd a = aeyd.a("aasl");
and generally seem to be doing a lot of things that would ordinarily be of interest to Exodus in terms of tracking etc, which makes me think that the generic defpackage name is being used as a way of bypassing signature detection and allowing multiple sdks to be incorporated into an app via this single signature.
currently looking into this app:
https://reports.exodus-privacy.eu.org/en/reports/149926/
and i also note that com.facebook.FacebookSdk doesn't register in Exodus.
this class makes many calls to "defpackage.*"
The text was updated successfully, but these errors were encountered: