Exodus-Privacy / Exodus-Privacy/etip

Add Alibaba phone-home libs

Open
#95 4 comments 1 reaction 0 assignees View on GitHub
tracker
Dominant language
Python
Stars
76
Forks
23
Avg merge
17d 6h
Merged PRs (30d)
2

Description

While analyzing an app I found that the class
`com.alibaba.sdk.android.utils.AMSDevReporter`
contains the url:
`http://adash.man.aliyuncs.com:80/man/ap`

and the class (the "d" is probably obfuscated)
`com.alibaba.sdk.android.httpdns.d`
contains the following domain name and IPs:
```
httpdns-sc.aliyuncs.com
203.107.1.97
203.107.1.100
203.107.1.1
```

The 1st class ist probably some dev/crash-reporter thing, the 2nd class is most likely a DNS-over-http implementation.
Both means they could potentially submit at least some unwanted data to alibaba.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.