3 ms·

Firebase, seriously???

• proactivesvcs 6y ago
  And Microsoft Appcenter Analytics: https://reports.exodus-privacy.eu.org/en/reports/uk.nhs.nhsx.colocate/latest/ https://reports.exodus-privacy.eu.org/en/reports/uk.nhs.nhsx...
  • erinaceousjones 6y ago
    Which they're using to track a couple of events, i.e. when the app fails to register with the API: https://github.com/nhsx/COVID-19-app-Android-BETA/blob/master/app/src/main/java/uk/nhs/nhsx/sonar/android/app/analytics/AnalyticEvent.kt https://github.com/nhsx/COVID-19-app-Android-BETA/blob/maste... (Though that analytics platform itself does do device fingerprinting, inasmuch as detecting phone model, OS version etc -- I assume no individually identifying stuff like IMEIs, but who knows what a bad actor can do with sufficient entropy?)
• geoah 6y ago
  They use firebase for push notifications. GCM (Google Cloud Messaging) has been moved to firebase, and it can now also do Apple notifications I think so it makes sense to just stick to one.
  • Sephiroth87 6y ago
    Except you don't need to import Firebase Analytics to use the messaging. And, same as the Facebook SDK situation earlier today, Firebase SDKs will do stuff when the app loads whether you reference them or not.
    • erinaceousjones 6y ago
      According to the repo [1] they're using: apply plugin: 'com.google.firebase.crashlytics' com.google.firebase:firebase-messaging [1] https://github.com/nhsx/COVID-19-app-Android-BETA/search?p=1&q=firebase&unscoped_q=firebase https://github.com/nhsx/COVID-19-app-Android-BETA/search?p=1... I assume crashlytics is for crash dumps only, could firebase-messaging pull in firebase-analytics?
      • angrais 6y ago
        Why are y'all aggressively judging the codebase when you don't even know how firebase analytics works on Android? Damn