Frost for Facebook should have TRACKING antifeature

1

I’m auditing the source code of Frost for Facebook by Allan Wang and I made a troubling discovery:

  • The app uses analytics (Bugsnag)
  • The checkbox to disable analytics does NOT disable it

For this reason, I think it should be made clear that the app tracks and reports your activities.

As an added bonus for privacy freaks like me, Bugsnag is hosted on Google servers.

1 Like
2

Did you open that issue, @dosse91?
Would you be so kind to share code snippets of your findings?
Thank you so much for reporting this.

3

Hi, yes I reported that issue.
Here’s the code:

  • Here you can see that it initializes BugSnag regardless of your analytics preferences: link
  • Here you can see that the option to disable analytics only disables a single line of logging in FrostVideoView.kt: link
2 Likes
4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.