4 ms·
The company I work for was acquired by a Chinese giant. Recently they sent us a static lib (i.e. no source available) to include in our app for “fraud detection
by aaaaaaaaaab 8y ago
The company I work for was acquired by a Chinese giant. Recently they sent us a static lib (i.e. no source available) to include in our app for “fraud detection”. We complied.
- driverdan 8y agoYou didn't ask what it was or where it came from?
- aaaaaaaaaab 8y agoI’ve asked, but my concerns were taken as a joke, because in the past I’ve constantly been complaining about our data collection practices. I was objecting when the marketig team pushed in the AppsFlyer SDK, then the Branch.io SDK, then the Google AdMob SDK, then the MoPub SDK, then the ComScore SDK, then the Saasquatch SDK, then the Kahuna SDK. The Facebook SDK is included too, of course. So after all this complaining over the years, they became kinda immune to my concerns, and when the Chinese handed down their blob they merrily went on with it.
- willstrafach 8y agoAnonymous tips accepted at hello@sudosecuritygroup.com
- null0pointer 8y agoWhat would it take for you to quit? Citing data collection practices as your reason. Don't have to answer, I'm just curious as it seems your morals are at odds with your companies.
- aaaaaaaaaab 8y agoTrue, and I'm already working on it! :fingerscrossed:
- saagarjha 8y agoIf you’re curious about it and free to do so, you could send it to me and I could run it though a disassembler.