Apple Removes Over 250 iOS Apps With Ad SDK That Collects Personal User Data


[​img]


sourcedna, analytics service tracks ios , android code, has discovered hundreds of ios apps collect identifiable user information, including apple id email addresses , device identifiers, through chinese third-party advertising sdk called youmi prohibited app store guidelines.

[​img]​

analytics firm, using new developer tool searchlight, found 256 affected apps, estimated 1 million total downloads, using 1 of versions of youmi in violation of user privacy. report claims of developers used sdk located in china, , many unaware of threat since tool kit delivered in binary form , obfuscated.

ars technica explained in more detail information gathered "gradually on past year or so" apps using youmi:
the personal info reportedly gathered via private apis , routed through youmi's servers in china.

apple released statement saying remove apps youmi app store, , reject future submissions using sdk:
sourcedna sent full list of affected apps apple, including official mcdonald's app in china, did not share publicly. developers can check if apps affected using analytics firm's searchlight tool.

discovery comes weeks after ios malware xcodeghost disclosed, arose malicious version of xcode, apple's official tool developing ios , os x apps. apple patched yispecter malware in ios 8.4.

article link: apple removes on 250 ios apps ad sdk collects personal user data
 

i think real question is: how many apps (and how long) have been making use of private apis using similar techniques? how many apps have in our devices have bypassed app store validation using similar procedures? , assure you, developer, not difficult thing @ all…
 


Forums News and Article Discussion MacRumors.com News Discussion


  • iPhone
  • Mac OS & System Software
  • iPad
  • Apple Watch
  • Notebooks
  • iTunes
  • Apple ID
  • iCloud
  • Desktop Computers
  • Apple Music
  • Professional Applications
  • iPod
  • iWork
  • Apple TV
  • iLife
  • Wireless

Comments

Post a Comment

Popular posts from this blog

iPHONE 5 s Finger print

is necessary use finger print feature or can pass during set-uo process?   you can skip step during setup.   Forums iPhone, iPad, and iPod Touch iPhone iPhone iPhone Mac OS & System Software iPad Apple Watch Notebooks iTunes Apple ID iCloud Desktop Computers Apple Music Professional Applications iPod iWork Apple TV iLife Wireless
Read more

Resolved why bool value is not changed in dispatch

i try change bool value in dispatch_async when applicationdidenterbackground invoked. can read correct value when method invoked when try use in dispatch_asynch see not right value. here how code looks code: - (void)applicationdidenterbackground:(uiapplication *)application { __block bool isalarmon = [[nsuserdefaults standarduserdefaults] boolforkey:@"alarmsituation"]; __block bool iswarningrepeaton = [[nsuserdefaults standarduserdefaults] boolforkey:@"warningrepeat"]; nslog(@"iswarningrepeaton %d", iswarningrepeaton); bool isvibrationon = [[nsuserdefaults standarduserdefaults] boolforkey:@"vibration"]; nsstring *strsoundname = [[[nsuserdefaults standarduserdefaults] objectforkey:@"selectedsoundname"] lowercasestring]; if ([[uidevice currentdevice] ismultitaskingsupported]) { __block uibackgroundtaskidentifier background_task; bac...
Read more

Help please Strange logs

#4 i'm not sure ask, or go...is normal keychain storage logs? com.apple.iadidrecords apple persistent state encryption call history user data key com.apple.ids: devicehbi ids: identity-rsa-private-key itunes iad password safari extensions list safari webcrypto master key didn't create of these. normal?   me again... also, apparently certified apple employee? certificate id , everything. can log in apple certification registry keychain storage password , have account id?????? may hub? apple using. not losing it. don't think @ least.   Forums Macs macOS macOS iPhone Mac OS & System Software iPad Apple Watch Notebooks iTunes Apple ID iCloud Desktop Computers Apple Music Profess...
Read more