Firebase support bounty

This is a bounty to promote development interest and find a solution to the many apps that fail because of the migration from GCM (Google Cloud Messaging) to FCM (Firebase Cloud Messaging)

https://www.bountysource.com/issues/51518216-gcm-fcm-update-needed-for-push-messaging

Follow the conversation in the latest pages of MicroG XDA thread and on GitHub:

https://forum.xda-developers.com/android/apps-games/app-microg-gmscore-floss-play-services-t3217616

https://github.com/microg


The Deprecation of GCM for FCM
by @ Shadow53
https://shadow53.com/post/whats-new-pussycat/#the-deprecation-of-gcm-for-fcm

"Users of MicroG on Android Oreo will notice that their apps using Google for notifications are no longer receiving them. This is because of Google pushing Firebase Cloud Messaging (FCM) as a replacement for Google Cloud Messaging (GCM) for notifications. MicroG currently only has support for the older GCM protocol, so apps using the newer FCM cannot register for notifications.

Some people have found that installing older versions of the app will cause it to register via GCM, then an update will continue using GCM. The problem of lacking support for FCM still remains.

A solution to this problem is to just not use apps that require Play Services at all, and request that developers of apps you use requiring Play Services implement an alternate method of pushing notifications.

This doesn’t work if you need a certain app that still requires Play Services, and certainly won’t work if trying to convince someone to switch to using MicroG. So, we need to get FCM implemented. Open Source enthusiasts will suggest that I do it if I think it needs to be done - I would, and I may in the future, but not any time soon. I have too many projects already that need to be worked on. So here’s hoping someone else is able to get something working…"


#bounty #firebase #fcm

https://www.bountysource.com/issues/51518216-gcm-fcm-update-needed-for-push-messaging

chris42:
Just to help a few people trying to figure out if push messaging is working or not, please check the following:

✅ you are using newest microg version 0.2.5-12879 running (ale5000 installer is updated and should be very helpful)
✅ you deactivated battery optimization for microg
✅ you activated google device registration
✅ you get all the green checkmarks in microg diagnostics
✅ you made sure nothing is blocking network traffic to mtalk.google.com (e.g. afwall, adaway, ...)
✅ you deleted the app you have troubles with and installed it fresh after updating to microg 0.2.5-12879
✅ you have not used backup solutions, like oandbackup, titaniumbackup, ... to restore app data
✅ you can also use the push notification tester to check. I just tried it and it works.

To verify incoming messages, look in you logs and search for "GmsGcmMcsInput". You should see the heartbeat and Incoming messages. In the incoming messages there should be a category stating your apps package. This should be messages your receive via push. (@mar-v-in I hope this is correct?!)


#firebase #fcm #bounty

How Tutanota replaced Google’s FCM with their own notification system

https://f-droid.org/en/2018/09/03/replacing-gcm-in-tutanota.html


#tutanota #email #fcm #firebase

Disable Fuck Services script 1.2

The goal of this program is to disable many trackers by Google, Facebook and others from the installed apps (and from Google Services if you have them). It will do a search and disable many of the analytics, ads, and firebase services for all user apps

1. Download the DisableFuckServices12.sh file
2. Copy it to /data/local/tmp with some root explorer (I used Mixplorer)
3. Give it 755 permission (also used Mixplorer for this, right after pasting)
4. Open a terminal (like Termux or Terminal Emulator)
5. Do the following 2 commands:
su
cd /data/local/tmp
sh DisableFuckServices12.sh
6. Wait (maybe a couple minutes depending on the number of apps installed)
7. Done

Warning: there is a small chance some apps will force close after this.
If so you can just reinstall them

https://forum.xda-developers.com/apps/magisk/script-disable-fk-services-trackers-apps-t4074427

Changelog : 
- 1.0 : Original version from MOVZX
- 1.1 : add Facebook trackers
- 1.2 : add IAMs trackers read Ars technica article https://arstechnica.com/information-technology/2020/03/4000-android-apps-silently-access-your-installed-software

Credits:
by MOVZX
Updated by rayman95
DanGoodin from Ars Technica
Tutorial by saitama


📡 @NoGoolag 📡 @Libreware
#disablefuckservices #disable #trackers #ads #analytics #firebase #fb #facebook

Over 4000 Android Apps Expose Users' Data via Misconfigured Firebase Databases

More than 4,000 Android apps that use Google's cloud-hosted Firebase databases are 'unknowingly' leaking sensitive information on their users, including their email addresses, usernames, passwords, phone numbers, full names, chat messages and location data.

The investigation, led by Bob Diachenko from Security Discovery in partnership with Comparitech, is the result of an analysis of 15,735 Android apps, which comprise about 18 percent of all apps on Google Play store.

"4.8 percent of mobile apps using Google Firebase to store user data are not properly secured, allowing anyone to access databases containing users' personal information, access tokens, and other data without a password or any other authentication," Comparitech said.

👀 The full contents of the database, spanning across 4,282 apps, included:

‼️ Email addresses: 7,000,000+
‼️ Usernames: 4,400,000+
‼️ Passwords: 1,000,000+
‼️ Phone numbers: 5,300,000+
‼️ Full names: 18,300,000+
‼️ Chat messages: 6,800,000+
‼️ GPS data: 6,200,000+
‼️ IP addresses: 156,000+
‼️ Street addresses: 560,000+

👉🏼 Read more:
https://thehackernews.com/2020/05/android-firebase-database-security.html

#android #app #google #playstore #firebase #database #security #breach #leak
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv

Google lists which Firebase SDKs require Google Play Services

Google is a pretty ubiquitous name in the Android space. Not only does the company own and maintain the Android Open Source Project itself, but it’s also in charge of the largest distribution platform on Android: the Google Play Store and the underlying Google Mobile Services (GMS) suite. GMS is the important part here. Firebase, Google’s cross-platform toolkit for things like analytics and crash detection, uses GMS to provide a lot of its functionality.

That’s all well and good if your target devices come with Google apps preinstalled, but what if they don’t? What if a user has unlocked their bootloader and flashed a Google-free ROM? What if someone’s using a Huawei device, or they’ve imported a phone from China? Will the Firebase-dependent parts of your app just not work?

Thankfully, if you’re trying to implement Firebase into your app, you don’t need to guess which SDKs will work on Google-free devices and which won’t. Google has helpfully released a list of all its current Firebase SDKs, and whether or not they depend on GMS. You can use this to tell at-a-glance which SDKs you can safely implement and which you may have to supplement or avoid.

💡 👉🏼 Here’s a table listing the Firebase SDKs and whether or not they have GMS dependencies:
https://www.xda-developers.com/google-list-firebase-sdk-require-google-play-services/

💡 👉🏼 https://firebase.google.com/docs/android/android-play-services

#google #list #firebase #sdk #playservices #dependencies
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Supabase

Open source Firebase alternative
https://github.com/supabase/supabase

#supabase #Firebase #alternatives

Appwrite : An Open Source Firebase Alternative

We're happy to share that we've just released Appwrite 0.8 with a lot of improvements on privacy and security. This brings us one step closer to achieving our goal of becoming a complete open-source alternative to Firebase. Our latest version adds support for JWT auth, ARM devices, Anonymous login, and advanced image manipulations.

We are already working on support for a Realtime database, GraphQL APIs, MongoDB support, and other pretty cool features. We have reached this stage with continued support from the community and we would love to hear your thoughts on how we can make it better. Please feel free to comment below.

You can learn more about Appwrite over at https://github.com/appwrite/appwrite


#firebase #alternatives

Apple and Google Monitor Notifications. We Need #Push Notification Alternatives

https://tuta.com/blog/open-source-email-fdroid

Comments

#gcm #fcm #firebase