GravyScanner : a FOSS Android app that reveals installed apps involved in Gravy Analytics data breach

GitHub - steffandroid/gravy-scanner: Android app that reveals installed apps which may be leaking your location data via Gravy Analytics

Open Source @lemmy.ml

Sudo Sodium @lemdro.id

5mo ago

GravyScanner : a FOSS Android app that reveals installed apps involved in Gravy Analytics data breach

github.com /steffandroid/gravy-scanner

29 comments

Outlook is my only offender... Kinda out of luck there.
- What about using web version? Are there any limitations compared to the app?
  
  Notifications come to mind.
Yahoo Mail (don't judge me) and Viber are the only ones that I still need to use, but don't see why they'd need the location permission. If I deny location permission to those apps, will that stop the leaking?
- My... Guess is that it's still another data point attaching your IP to you. I haven't really dug into how true that would be, but there is def fingerprinting stuff that could be shared without location permission. I.e. just a web request gives them your phones ip. Now that might be your cellphone wan ip, That might be your home ip etc... still identifying info.
  Imo this isn't so much about tracking your literal location (though, that too) but also in tracking you across websites without permission.
Needs some more cooking. Boots into a white page with nothing on it for me.
- That means you're clear and don't have any offending apps.
6 pages of apps... nice. 😅
Now, seriously. Android 14 on a Samsung phone, lets me select "location: only while using the app". I close apps when not using them, and limit notifications so they don't get auto-started at random. Unused app detection, puts them in "deep sleep" which doesn't allow them to run at all, and strips them of all permissions.
This scanner, would be more useful if it also checked which apps have the location permission enabled, and are frequently used.
Podcast Addict, bummer I use that daily. Any way to block the leak without ditching the app?
- IIRC leak already happened and hackers already have the data now
Man, I had no idea Tumblr was on the Gravy list. Great app!
- Tumblr is wpa enabled. Use that.
  
  I'm not sure I understand.
Had no idea Textra was on here. I guess back to stock graphene OS messenger.
- I'd suggest qksms instead. Moved to it from textra and works very well.
  
  Long unmaintained, use QUIK instead which is a successor
Bejeweled 3 has forsaken me.
Crunchyroll, can weebs not stay in their bedrooms privately??
Also, 2dehands, which is the biggest second hand buying / selling site and app of Belgium. Quite a big one!
Almost read it gay scanner
- "Your phone is not gay enough... here are some themes and backgrounds to make it more fun!"
  (probably not PC, but that could be a fun app)
Blank white screen on the personal profile (woot).
Outlook only on the work profile (only has notification access and nothing else). I'm actually surprised Teams isn't on that list, but ok.
One single app: some random pizza making game I installed because I saw someone playing it in school. None in the work profile, suprisingly

29 comments