www/proprietary malware-mobiles.html proprietar...

[Therese Godefroy]

CVSROOT:        /webcvs/www
Module name:    www
Changes by:     Therese Godefroy <th_g> 19/03/04 02:31:24

Modified files:
        proprietary    : malware-mobiles.html 
                         proprietary-surveillance.html proprietary.html 
        proprietary/workshop: mal.rec 

Log message:
        Android apps collect hardware identifiers (www-discuss 2019-03-14).

CVSWeb URLs:
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/malware-mobiles.html?cvsroot=www&r1=1.86&r2=1.87
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-surveillance.html?cvsroot=www&r1=1.248&r2=1.249
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary.html?cvsroot=www&r1=1.89&r2=1.90
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/workshop/mal.rec?cvsroot=www&r1=1.49&r2=1.50

Patches:
Index: malware-mobiles.html
===================================================================
RCS file: /webcvs/www/www/proprietary/malware-mobiles.html,v
retrieving revision 1.86
retrieving revision 1.87
diff -u -b -r1.86 -r1.87
--- malware-mobiles.html        28 Feb 2019 09:08:24 -0000      1.86
+++ malware-mobiles.html        4 Mar 2019 07:31:23 -0000       1.87
@@ -391,6 +391,25 @@
     developers of other nonfree programs.</p>
   </li>
 
+  <li id="M201902140">
+    <p>The AppCensus database gives information on <a
+    href="https://www.appcensus.mobi";> how Android apps use and
+    misuse users' personal data</a>. As of March 2019, nearly
+    78,000 have been analyzed, of which 24,000 (31%) transmit the <a
+    href="/proprietary/proprietary-surveillance.html#M201812290">
+    Advertising ID</a> to other companies, and <a
+    href="https://blog.appcensus.mobi/2019/02/14/ad-ids-behaving-badly/";>
+    18,000 (23% of the total) link this ID to hardware identifiers</a>,
+    so that users cannot escape tracking by resetting it.</p>
+
+    <p>Collecting hardware identifiers is in apparent violation of
+    Google's policies. But it seems that Google wasn't aware of it,
+    and, once informed, was in no hurry to take action. This proves
+    that the policies of a development platform are ineffective at
+    preventing nonfree software developers from including malware in
+    their programs.</p>
+  </li>
+
   <li id="M201902060">
     <p>Many nonfree apps have a surveillance feature for <a
     
href="https://techcrunch.com/2019/02/06/iphone-session-replay-screenshots/";>
@@ -979,7 +998,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2019/02/28 09:08:24 $
+$Date: 2019/03/04 07:31:23 $
 <!-- timestamp end -->
 </p>
 </div>

Index: proprietary-surveillance.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary-surveillance.html,v
retrieving revision 1.248
retrieving revision 1.249
diff -u -b -r1.248 -r1.249
--- proprietary-surveillance.html       28 Feb 2019 21:46:58 -0000      1.248
+++ proprietary-surveillance.html       4 Mar 2019 07:31:23 -0000       1.249
@@ -780,6 +780,25 @@
     developers of other nonfree programs.</p>
   </li>
 
+  <li id="M201902140">
+    <p>The AppCensus database gives information on <a
+    href="https://www.appcensus.mobi";> how Android apps use and
+    misuse users' personal data</a>. As of March 2019, nearly
+    78,000 have been analyzed, of which 24,000 (31%) transmit the <a
+    href="/proprietary/proprietary-surveillance.html#M201812290">
+    Advertising ID</a> to other companies, and <a
+    href="https://blog.appcensus.mobi/2019/02/14/ad-ids-behaving-badly/";>
+    18,000 (23% of the total) link this ID to hardware identifiers</a>,
+    so that users cannot escape tracking by resetting it.</p>
+
+    <p>Collecting hardware identifiers is in apparent violation of
+    Google's policies. But it seems that Google wasn't aware of it,
+    and, once informed, was in no hurry to take action. This proves
+    that the policies of a development platform are ineffective at
+    preventing nonfree software developers from including malware in
+    their programs.</p>
+  </li>
+
   <li id="M201902060">
     <p>Many nonfree apps have a surveillance feature for <a
     
href="https://techcrunch.com/2019/02/06/iphone-session-replay-screenshots/";>
@@ -2177,7 +2196,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2019/02/28 21:46:58 $
+$Date: 2019/03/04 07:31:23 $
 <!-- timestamp end -->
 </p>
 </div>

Index: proprietary.html
===================================================================
RCS file: /webcvs/www/www/proprietary/proprietary.html,v
retrieving revision 1.89
retrieving revision 1.90
diff -u -b -r1.89 -r1.90
--- proprietary.html    28 Feb 2019 21:46:58 -0000      1.89
+++ proprietary.html    4 Mar 2019 07:31:23 -0000       1.90
@@ -146,6 +146,25 @@
 <h3 id="latest">Latest additions</h3>
 
 <ul class="blurbs">
+  <li id="M201902140">
+    <p>The AppCensus database gives information on <a
+    href="https://www.appcensus.mobi";> how Android apps use and
+    misuse users' personal data</a>. As of March 2019, nearly
+    78,000 have been analyzed, of which 24,000 (31%) transmit the <a
+    href="/proprietary/proprietary-surveillance.html#M201812290">
+    Advertising ID</a> to other companies, and <a
+    href="https://blog.appcensus.mobi/2019/02/14/ad-ids-behaving-badly/";>
+    18,000 (23% of the total) link this ID to hardware identifiers</a>,
+    so that users cannot escape tracking by resetting it.</p>
+
+    <p>Collecting hardware identifiers is in apparent violation of
+    Google's policies. But it seems that Google wasn't aware of it,
+    and, once informed, was in no hurry to take action. This proves
+    that the policies of a development platform are ineffective at
+    preventing nonfree software developers from including malware in
+    their programs.</p>
+  </li>
+
   <li id="M201902230">
     <p>Facebook offered a convenient proprietary
     library for building mobile apps, which also <a
@@ -213,14 +232,6 @@
     firewall to block connections to Vizio's servers. Or, as a last resort,
     you can replace your TV with another model.</p>
   </li>
-
-  <li id="M201902200">
-    <p>Some portable surveillance
-    devices (&ldquo;phones&rdquo;) now have <a
-    
href="https://www.theguardian.com/technology/2019/feb/20/samsung-galaxy-s10-launch-triple-cameras-ultrasonic-fingerprint-sensors-and-5g";>
-    fingerprint sensors in the display</a>. Does that imply they could
-    take the fingerprint of anyone who operates the touch screen?</p>
-  </li>
 </ul>
 
 
@@ -281,7 +292,7 @@
 
 <p class="unprintable">Updated:
 <!-- timestamp start -->
-$Date: 2019/02/28 21:46:58 $
+$Date: 2019/03/04 07:31:23 $
 <!-- timestamp end -->
 </p>
 </div>

Index: workshop/mal.rec
===================================================================
RCS file: /webcvs/www/www/proprietary/workshop/mal.rec,v
retrieving revision 1.49
retrieving revision 1.50
diff -u -b -r1.49 -r1.50
--- workshop/mal.rec    28 Feb 2019 21:46:59 -0000      1.49
+++ workshop/mal.rec    4 Mar 2019 07:31:23 -0000       1.50
@@ -25,6 +25,30 @@
 ####    Please don't remove the blank line after this marker!    ####
 # ADD NEW BLURB HERE
 
+Added: 2019-03-04
+Id: 201902140
+RT: www-discuss 2019-03-04 (these-android-apps-have-been-tracking-you...)
+PubDate: 2019-02-14
+Target: proprietary-surveillance.html SpywareInMobileApps
+Target: malware-mobiles.html surveillance
+Keywords:
+Blurb: <p>The AppCensus database gives information on <a
++   href="https://www.appcensus.mobi";> how Android apps use and
++   misuse users' personal data</a>. As of March 2019, nearly
++   78,000 have been analyzed, of which 24,000 (31%) transmit the <a
++   href="/proprietary/proprietary-surveillance.html#M201812290">
++   Advertising ID</a> to other companies, and <a
++   href="https://blog.appcensus.mobi/2019/02/14/ad-ids-behaving-badly/";>
++   18,000 (23% of the total) link this ID to hardware identifiers</a>,
++   so that users cannot escape tracking by resetting it.</p>
++
++   <p>Collecting hardware identifiers is in apparent violation of
++   Google's policies. But it seems that Google wasn't aware of it,
++   and, once informed, was in no hurry to take action. This proves
++   that the policies of a development platform are ineffective at
++   preventing nonfree software developers from including malware in
++   their programs.</p>
+
 Added: 2019-02-28
 Id: 201902230
 RT: 1364145