Hacker News new | ask | show | jobs
by xanaxagoras 1849 days ago
Wait, what?
1 comments

Sorry, I'm not sure what part of that wasn't clear. Facebook ships useful libraries to app developers as binaries and they use that to get code on everyone's phone in order to add to their data collection apparatus.

I'm pretty sure they're not the only ones who do that either. It's a pretty effective method to get around app sandboxes.

As someone who does not build mobile apps, none of that was clear from the earlier comment. I appreciate the additional explanation - I wonder if there's a way to find out which apps include this so I can avoid them...
You should probably avoid any closed source software that isn't community maintained just like on the desktop.

Unfortunately Apple and Google work extremely hard to make this somewhere between difficult and impossible.

Which libraries in particular report ad/identity telemetry to Facebook?
My stock camera app pings FB on startup because of this. Fortunately it can be blocked on Android.
How do I block this on Android?
You can do things that range from cutting off data access to the app to installing Blokada and cutting off access via DNS.
NetGuard is another option for DNS filtering.
AFAIK in vanilla Android you have to use VPN if you want to block access to certain domain for all the apps.
NoRoot Firewall
That's fucking infuriating.
How can 3rd party developers make API calls to a binary?
https://developer.apple.com/library/archive/documentation/Ma...

I haven't touched iOS development in years but I believe you don't even need a dev account to publish these.