3 ms·

I know exactly how this software works because I have analyzed it deeply. Every packet that goes through the Onavo VPN is analyzed. Using API's available to a n

I know exactly how this software works because I have analyzed it deeply. Every packet that goes through the Onavo VPN is analyzed. Using API's available to a normal sandboxed app, the source port is mapped with the process ID, then mapped to the package identifier, and then Facebook knows how much data is being used by which apps. Until SSL was mandatory for apps, they could also analyze the data itself, but that was stopped a couple years ago on iOS. Once Facebook has all the packets, they can do various analyses and machine learning to even learn which features are most popular within a competitor's app. It is quite sophisticated.

floatingatoll 8y ago
Does it have logic to inhibit packet analysis when being tested by Apple App Store reviewers?
- gumby 8y ago
  You're thinking of Volkswagon's VPN app.
  - verelo 8y ago
    Haha, it’s rare on HN that someone gets a joke right. Well done! Edit: it was worth the downvotes, would do again.
    - mhh__ 8y ago
      For better or worse, HN can be a bit autistic when it comes to comedy
      - medecau 8y ago
        > For better or worse, HN can be a bit autistic when it comes to comedy This will age well...
  - zydeco 8y ago
    Actually, that's exactly what Uber did: https://hn.algolia.com/?query=uber%20app%20store&sort=byPopularity&prefix&page=0&dateRange=all&type=story https://hn.algolia.com/?query=uber%20app%20store&sort=byPopu...
- willstrafach 8y ago
  No, it does not.
  - Rjevski 8y ago
    I guess this speaks a lot about the App Store's review team. This is pure spyware, didn't even try to hide, and then allowed it.
willstrafach 8y ago
> Using API's available to a normal sandboxed app, the source port is mapped with the process ID, then mapped to the package identifier, and then Facebook knows how much data is being used by which apps. This is just not true at all. Where are you getting this information? They do not do any sort of analysis on the device side as that is not possible. They connect your device to a VPN server (All analysis is conducted there). The APIs you describe can not be accessed from within the App Store sandbox, I believe as of iOS 8 that became no longer possible. Here are technical details on the local functions of the app: https://medium.com/@chronic_9612/notes-on-analytics-and-tracking-in-onavo-protect-for-ios-904bdff346c0 https://medium.com/@chronic_9612/notes-on-analytics-and-trac...
- BlissfulRear 8y ago
  If it were impossible to perform some analysis on device, how are apps like https://itunes.apple.com/us/app/my-data-manager-track-your/id477865384?mt=8 https://itunes.apple.com/us/app/my-data-manager-track-your/i... attributing data to apps?
  - Angostura 8y ago
    That looks like it also contains a VPN component. Wouldn't touch it with a bargepole.
  - tinus_hn 8y ago
    The app you link shows very general services, it’s a ‘vpn’ client so it gets all network traffic. It isn’t hard to show you’re using Facebook or twitter, but there is a firm limit on granularity. Apps don’t even get a list of all apps you have installed, much less information on how much data another app is using. The system collects that data though, you can see it in the settings app.

floatingatoll 8y ago

Does it have logic to inhibit packet analysis when being tested by Apple App Store reviewers?

gumby 8y ago
You're thinking of Volkswagon's VPN app.
- verelo 8y ago
  Haha, it’s rare on HN that someone gets a joke right. Well done! Edit: it was worth the downvotes, would do again.
  - mhh__ 8y ago
    For better or worse, HN can be a bit autistic when it comes to comedy
    - medecau 8y ago
      > For better or worse, HN can be a bit autistic when it comes to comedy This will age well...
- zydeco 8y ago
  Actually, that's exactly what Uber did: https://hn.algolia.com/?query=uber%20app%20store&sort=byPopularity&prefix&page=0&dateRange=all&type=story https://hn.algolia.com/?query=uber%20app%20store&sort=byPopu...
willstrafach 8y ago
No, it does not.
- Rjevski 8y ago
  I guess this speaks a lot about the App Store's review team. This is pure spyware, didn't even try to hide, and then allowed it.

willstrafach 8y ago

> Using API's available to a normal sandboxed app, the source port is mapped with the process ID, then mapped to the package identifier, and then Facebook knows how much data is being used by which apps. This is just not true at all. Where are you getting this information? They do not do any sort of analysis on the device side as that is not possible. They connect your device to a VPN server (All analysis is conducted there). The APIs you describe can not be accessed from within the App Store sandbox, I believe as of iOS 8 that became no longer possible. Here are technical details on the local functions of the app: https://medium.com/@chronic_9612/notes-on-analytics-and-tracking-in-onavo-protect-for-ios-904bdff346c0 https://medium.com/@chronic_9612/notes-on-analytics-and-trac...

BlissfulRear 8y ago
If it were impossible to perform some analysis on device, how are apps like https://itunes.apple.com/us/app/my-data-manager-track-your/id477865384?mt=8 https://itunes.apple.com/us/app/my-data-manager-track-your/i... attributing data to apps?
- Angostura 8y ago
  That looks like it also contains a VPN component. Wouldn't touch it with a bargepole.
- tinus_hn 8y ago
  The app you link shows very general services, it’s a ‘vpn’ client so it gets all network traffic. It isn’t hard to show you’re using Facebook or twitter, but there is a firm limit on granularity. Apps don’t even get a list of all apps you have installed, much less information on how much data another app is using. The system collects that data though, you can see it in the settings app.