CoraLibre android sdk

[Message forwarded from Gramá]

Governments are starting to roll out Coronavirus-tracing apps based on the Apple-Google developed Exposure Notification API.
Google has implemented the API in their Google Services, which means that if you don't use them, you cannot use the Coronavirus Tracing APP.
I am a health specialist and I do care about privacy, I have no Google Services on any of my or my family's phones. But I do care about health and I know the importance that tracing infections have for the control of epidemics. That's why I'm fighting for doing this in the most possible open way, using as much Open Source software as possible, and I strongly belive this can be done.

Unfortunately until now all the biggest, government-funded, projects, do not address this issue, simply relying on the use of the API implementation in Google Play Services. But we have a great, well known, Android developer which started an project to develop an Open Source SDK that would be compatible with such systems and would allow us to have a Coronavirus Tracing APP that would be independent from Google Play Services.

This is the link to the project: https://github.com/theScrabi/CoraLibre-android-sdk .

Please spread the word among other developers, to have as much people as possible working on it. I'm not a developer unfortunately, so I cannot help with that. But I am a doctor and I strongly believe on the importance of this kind of tracing tools for epidemics control.


#CoraLibre #sdk #coronavirus #covid #tracing #tracking #bigbrother

Report claims a popular iOS SDK is stealing click revenue from other ad networks

The suspicious iOS SDK is used by more than 1,200 apps, with 300 million downloads/month.

In an explosive report published today, developer security firm Snyk claims it found malicious code inside a popular iOS SDK used by more than 1,200 iOS applications, all collectively downloaded more than 300 million times per month.

According to Snyk, this malicious code was hidden inside the iOS SDK of Mintegral, a Chinese-based advertising platform.

Mintegral provides this SDK to Android and iOS app developers for free. Developers use the SDK to embed ads inside their apps with just a few lines of code, in order to cut down development time and costs.

https://www.zdnet.com/article/report-claims-a-popular-ios-sdk-is-stealing-click-revenue-from-other-ad-networks/

#Apple #iOS #SDK #malicious

Google lists which Firebase SDKs require Google Play Services

Google is a pretty ubiquitous name in the Android space. Not only does the company own and maintain the Android Open Source Project itself, but it’s also in charge of the largest distribution platform on Android: the Google Play Store and the underlying Google Mobile Services (GMS) suite. GMS is the important part here. Firebase, Google’s cross-platform toolkit for things like analytics and crash detection, uses GMS to provide a lot of its functionality.

That’s all well and good if your target devices come with Google apps preinstalled, but what if they don’t? What if a user has unlocked their bootloader and flashed a Google-free ROM? What if someone’s using a Huawei device, or they’ve imported a phone from China? Will the Firebase-dependent parts of your app just not work?

Thankfully, if you’re trying to implement Firebase into your app, you don’t need to guess which SDKs will work on Google-free devices and which won’t. Google has helpfully released a list of all its current Firebase SDKs, and whether or not they depend on GMS. You can use this to tell at-a-glance which SDKs you can safely implement and which you may have to supplement or avoid.

💡 👉🏼 Here’s a table listing the Firebase SDKs and whether or not they have GMS dependencies:
https://www.xda-developers.com/google-list-firebase-sdk-require-google-play-services/

💡 👉🏼 https://firebase.google.com/docs/android/android-play-services

#google #list #firebase #sdk #playservices #dependencies
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag