Exodus-Privacy / Exodus-Privacy/etip
Add Alibaba phone-home libs
Open
tracker
- Dominant language
- Python
- Stars
- 76
- Forks
- 23
- Avg merge
- 17d 6h
- Merged PRs (30d)
- 2
Description
While analyzing an app I found that the class
`com.alibaba.sdk.android.utils.AMSDevReporter`
contains the url:
`http://adash.man.aliyuncs.com:80/man/ap`
and the class (the "d" is probably obfuscated)
`com.alibaba.sdk.android.httpdns.d`
contains the following domain name and IPs:
```
httpdns-sc.aliyuncs.com
203.107.1.97
203.107.1.100
203.107.1.1
```
The 1st class ist probably some dev/crash-reporter thing, the 2nd class is most likely a DNS-over-http implementation.
Both means they could potentially submit at least some unwanted data to alibaba.
Contributor guide
Assessment
This issue has not been assessed yet.