why is mxplayer PRO contacting facebook ?? - MX Player

I recently installed a firewall on my phone, mostly to block all the annoying, not relevant ads.
To my surprise, my mxplayer PRO is
- contacting Facebook, while playing a video from my local phone / LAN.
Why is it doing that ?
it also accesses compute instances on Amazon AWS.
Why is it doing that ?
Furthermore, when I block access to facebook and aws, mxplayer keeps working happily.
Did you request my permission again, as is necessary since the coming into force of GDPR / EU rules ??
(I do not remember that)
Is the data you want to collect lawful and necessary, in compliance with GDPR, for the business you have with me ?
awaiting your answers,
Due

Related

[Q] Has anyone tried Simple mobile?

Has anyone tried Simple mobile? They have a $60 unlimited everything 4g plan. I hear they piggy back off the T-mobile towers and use the TMO 3G/4g network
So wouldnt coverage, signal, and service quality be just as good as if you were on T-Mobile?
If anyone has used them is their unlimited data truly unlimited or do you get throttled?
Edit: I just called Simple's CS department. They told me it was unlimited data. I asked if it was like T-Mobile's unlimited data where it gets throttled after 5gb and he said no, that it is really unlimited. I really want more confirmation about that before I switch. I mean REAL unlimited data, unlimited calling and texting for 60 bucks flat? And all of TMO's phones are compatible with it?? hmm cant beat that.. I emailed them as well to find out. I'll post when they reply
I have a friend who uses them, the only complaint he really haves is you don't get the T-Mobile Wi-Fi calling.
If you want to you can ask him some questions, he has been using it for a while now. www.twitter.com/neillund
MLIGN said:
I have a friend who uses them, the only complaint he really haves is you don't get the T-Mobile Wi-Fi calling.
If you want to you can ask him some questions, he has been using it for a while now. www.twitter.com/neillund
Click to expand...
Click to collapse
I know Neil Spoke to him, he said it works just as good as TMO except like what you said, no wifi calling.
I called them again and asked another agent. He said it is capped after a certain amount. I asked what that amount was and he couldnt tell me. Not very knowledgeable if you ask me He insturcted me to read the terms and conditions and gave me the section numbers (which were wrong) I fount this in their terms and conditions under data:
25. Additional Terms for Data Plans and Features
The following terms apply to your data plan or feature ("Data Plan"). To the extent any term in your Data Plan expressly conflicts with the general Terms and Conditions, which also apply to your service, the term in your Data Plan will govern. Please read your Data Plan carefully.
1. Permissible and Prohibited Data Uses
Your Data Plan is intended for Web browsing, messaging, and similar activities on your device and not on any other equipment. Unless explicitly permitted by your Data Plan, other uses, including for example, tethering your device to a personal computer or other hardware, are not permitted.
Examples of prohibited uses include but are not limited to: (a) server devices or host computer applications, including continuous Web camera posts or broadcasts, automatic data feeds, automated machine-to-machine connections or peer-to-peer (P2P) file-sharing applications that are broadcast to multiple servers or recipients, "bots" or similar routines that could disrupt net user groups or email use by others or other applications that denigrate network capacity or functionality; (b) as a substitute or backup for private lines or dedicated data connections; (c) any activity that adversely affects the ability of other users or systems to use either Simple Mobile's services or the network-based resources of others, including the generation or dissemination of viruses, malware or "denial of service" attacks; (d) accessing, or attempting to access without authority, the information, accounts or devices of others, or to penetrate, or attempt to penetrate, Simple Mobile's or another entity's network or systems; or (e), running software or other devices that maintain continuously active Internet connections when a computer's connection would otherwise be idle, or "keep alive" functions. For example, you cannot use a Data Plan for Web broadcasting, or for the operation of servers, telemetry devices and/or supervisory control and data or (f) engaging in atypical web usage behavior.
2. Protective Measures
To provide a good experience for the majority of our customers and minimize capacity issues and degradation in network performance we may take measures including temporarily reducing data throughput for a subset of customers who use a disproportionate amount of bandwidth. Additionally, in the event that a customer is in violation of the Permissible and Prohibited Data Uses listed above, we may reduce your data speed for the remainder of that billing cycle or terminate data service without notice or refund. We may also suspend, terminate, or restrict your data session, Plan, or service if you use your Data Plan in a manner that interferes with other customers' service, our ability to allocate network capacity among customers, or that otherwise may degrade service quality for other customers.
3. Downloadable Content and Applications
You can purchase Content and Applications (e.g., downloadable or networked applications, wallpapers, ringtones, games, and productivity tools) ("Content & Apps") for and with your compatible device. Some Apps that you can purchase with your device are not sold by Simple Mobile; for these Apps, you can identify the third party seller at the point of purchase. For these third party purchases Simple Mobile is not responsible for the App, including download, installation, use, transmission failure, interruption, or delay, or any content or website you may be able to access through the App. Any support questions for these Apps should be directed to the third party seller identified at the point of purchase. When you use, download or install an App sold by a third party seller, you may be subject to license terms between you and the third party seller and App developer. When you use, download, or install Content or Apps that you purchase from Simple Mobile, the Content or App is licensed to you by Simple Mobile and may be subject to additional license terms between you and the creator/owner of the Content or App. Whether purchased from Simple Mobile or a third party seller, any Content or App you purchase is licensed for personal, lawful, non-commercial use on your device only. You may not transfer, copy, or reverse engineer any Content or App, or alter, disable or circumvent any digital rights management security features embedded in the Content or App.
Simple Mobile is not responsible for any third party content or website you may be able to access using your device. You may encounter advertisements from other entities ("Third Party Ads") while you are browsing the Internet, or using an application on your device. Simple Mobile is not responsible for any Third Party Ads, or for any website or content that you may access by clicking on or following a link contained in a Third Party Ad.
Simple Mobile may retain, use, and share information collected when you download, use, or install some Content or Apps, may update your Content or App remotely, or may disable or remove any Content or App at any time. Refer to Simple Mobile's Privacy Policy as well as the Content or App creator/owner's privacy policy for information regarding the use of information collected when you download, install, or use any Content or App. We are not responsible for any transmission failure, interruption, or delay related to Content & Apps, or any content or website you may be able to access through the Content or App.
Over in the Vibrant forums, it was posted that it is 1GB. Not a throttle, but a cut off.... check that forum on XDA
rorycs said:
Over in the Vibrant forums, it was posted that it is 1GB. Not a throttle, but a cut off.... check that forum on XDA
Click to expand...
Click to collapse
Thanks, I just called their corp office. They told me the data is only meant to be used for browsing, downloading applications, messaging and email. That any heavy streaming, downloading or tethering or excessive use goes against their terms. They said they will either slow it down if it gets flagged for excessive use or turn it off completely. I asked ok, well how much data before it get's flagged. He said there is no number. They base it off the average use by customers. Pretty crappy if you ask me. So if you stream anything like you tube or anything at anytime you risk having your service slowed or turned off..
I've been using SM for 8 months. These are the services I use with my data plan:
Gtalk (moderate)
Dropbox (heavy)
Youtube (moderate)
Rom and application downloading (heavy)
Google Maps w/GPS (heavy)
Browsing (heavy)
Various turn-based game (moderate)
Picasa and Facebook photo uploading (heavy)
I have never experienced a throttle or termination of data services. I highly recommend them. I have no commercial interest or relationship with Simple Mobile or with anyone that does.
_atlien_ said:
I've been using SM for 8 months. These are the services I use with my data plan:
Gtalk (moderate)
Dropbox (heavy)
Youtube (moderate)
Rom and application downloading (heavy)
Google Maps w/GPS (heavy)
Browsing (heavy)
Various turn-based game (moderate)
Picasa and Facebook photo uploading (heavy)
I have never experienced a throttle or termination of data services. I highly recommend them. I have no commercial interest or relationship with Simple Mobile or with anyone that does.
Click to expand...
Click to collapse
How much data would you estimate you use a month? I read too that some people report being throttled after 1gb, some have said they have gotten it after 2gb
Anyone tried using a SIM from a Straight Talk phone? Their $45/mo unlimited plan seems like the best deal around, at least on paper.

ninesky browser - privacy worry

Hi everybody!
I recently started looking for a browser to replace the stock one and I think I installed every possible option there is without giving much thought to the consequences - app permissions and possible violation of my privacy and misuse of my data.
So I found what I thought was a really nice and well-functioning browser called Ninesky from the Android market.
Luckily for me I did not get to use it for long, before I detected a strange pattern - Ninesky would automatically start itself upon boot, connect to a server in China, upload some data and receive some back and then just sit there and wait idly.
The server that it connects to belongs to a company called aBitCool, which is, according to Bloomberg, an ISP in China.
So I kill it off and after a while it's back, doing the same thing. I also noticed a similar behavior for Dolphin HD, except that it would send data just once very quickly after boot-up and then close itself and stay quiet. That led me to Google it a little, which in turn led me to an existing thread about Dolphin HD on this forum.
So here are my noob questions that I hope somebody can answer, please:
1. Can somebody take a look at Ninesky browser and let us all know what kind of data it is transmitting about its users upon boot and maybe even later on during the actual use of the browser? The list of permissions that Ninesky asks for is huge and that makes me a little worried. Also, Ninesky runs a "safety check" of every URL visited. I wonder what that really is.
2. Say it would try to steal information from its users - would it be possible for the app to somehow get access to my stored usernames and passwords from other programs (such as Gmail or Skype) or are these encrypted? I presume that if I were stupid enough to let Ninesky's password manager "remember" my usernames and passwords for certain websites then that information would be easily accessible to them.
3. Can an app with such permissions also function as a keylogger?
4. I can understand why folks here would write some apps on their own and share them with the rest of us. I can understand why a developer or a company would write an app and make one version available for "free" or as an ad supported one and/or offer a premium version for $$$. At the end of the day developers need to eat and pay their bills just like the rest of us and companies are (for the most part) profit-seeking institutions (unless they are GE or MS that have money to burn). That said - why for the love of god would anybody, other than an enthusiast, develop a browser, for which they will not ask for any $$ or won't even display any ads in it? Where is the catch? Now, I know that Opera and Firefox get money from Google to use it as their default search engine, but would this really apply for a few random Chinese companies? Where is the catch?
Thank you.
I was a big supporter of Ninesky but I uninstalled today. It does seem to be constantly running and transmitting data, though what data is being transmitted I don't know. LBE also kept notifying me that it was trying to obtain my location information even when I wasn't using it. I uninstalled it through the Market and left a one star review.
Drunk texted from my MIUI Thunderbolt.
I'm writing a review of about 13 different Android browsers, and came across Ninesky. Has anyone heard anything more about the privacy concerns and what data it might be transmitting?
well....if it keeps requesting the location even while its closed, thats not a good sign...
Not good. This needs addressing.
I have changed my review on Market also until we get some answers.
Cheers to the OP.
I agree. I think my review should come out tomorrow, hopefully the developer reaches out. It really is a decent browser.
Sent from my Transformer Prime TF201 using xda premium
´I'll leave you here my tests made since Monday with last versions of each app:
==|Boat 4.0.1|==
#Just after starting#
- Ask for GPS location
- 211.151.139.246 (China Network Information Center)
#When going to any website#
- IP from that website
--------------------------------------------------------
==|Dolphin HD 8.6.1|==:silly:
#Just after starting#
- 184.73.86.141 (AMAZON.COM - amazonaws.com - US)
- 65.52.32.12 (Microsoft Corp - US)
- 107.20.57.0 (AMAZON.COM - amazonaws.com - US)
and one more on this IP range type...
- 205.251.242.197 (AMAZON.COM - amazonaws.com - US)
- 205.251.242.165 (AMAZON.COM - amazonaws.com - US)
- 72.21.195.98 (AMAZON.COM - amazonaws.com - US)
#When going to any website#
- IP from that website
--------------------------------------------------------
==|Firefox 14.0.1|==
#Just after starting#
- No Ping
#When going to any website#
- 80.67.92.43 (AKAMAI TECHNOLOGIES US) *
- 93.184.219.20 (EdgeCast Networks - US) *
- IP from that website
* note: not always, most of the times just go to IP website we asked
--------------------------------------------------------
==|Opera 12.0.4|==:victory:
#Just after starting#
- No Ping
#When going to any website#
- IP from that website
note: DON'T use Opera Turbo or EVERY single info WILL pass through their servers...
--------------------------------------------------------
It's pretty obvious to me who are the most privacy oriented here...
STAY WAY FROM OPERA MINI AND DOLPHIN MINI AND ALL MINI VERSIONS. They process all info on their server first for speed.
Anyone researched Xscope or could research this browser?
If you explain how, I could do it myself!!
Sent from my GT-I9000 using xda premium
But the OP got it wrong with money burning by GE & MS. There's no such thing, its all business. Just to let you know, in the browser wars - Firefox was Google's first step into browsing. Then came Chrome.
For all privacy concerns, LBE Privacy Guard is a good option. Though its Korean, if am not wrong.
Well, finally there's options out there. Nobody is forcing us to download, install & use their apps.
Sent from my MT11i using Tapatalk 2
bombayboy said:
But the OP got it wrong with money burning by GE & MS. There's no such thing, its all business. Just to let you know, in the browser wars - Firefox was Google's first step into browsing. Then came Chrome.
For all privacy concerns, LBE Privacy Guard is a good option. Though its Korean, if am not wrong.
Well, finally there's options out there. Nobody is forcing us to download, install & use their apps.
Sent from my MT11i using Tapatalk 2
Click to expand...
Click to collapse
Agree with everything BUT Firefox was never connected to Google like Chrome. Firefox's current existence is owed almost exclusively to its search partnership with Google wherein Mozilla Corp receives a portion of ad revenue from Google queries initiated from Firefox's search bar. This revenue amounts to tens of millions of dollars. But Mozilla and Google Relations Strained Due to Chrome.
Firefox its independent and don't collect your data like Chrome/Google do...
sushidog said:
Agree with everything BUT Firefox was never connected to Google like Chrome. Firefox's current existence is owed almost exclusively to its search partnership with Google wherein Mozilla Corp receives a portion of ad revenue from Google queries initiated from Firefox's search bar. This revenue amounts to tens of millions of dollars. But Mozilla and Google Relations Strained Due to Chrome.
Firefox its independent and don't collect your data like Chrome/Google do...
Click to expand...
Click to collapse
Connected with reference to Google promoting & supporting Firefox before they decided to go with Chrome.
I still use Firefox, Aurora & Chrome
Sent from my MT11i using Tapatalk 2
If you're not paying it, you are the product being sold.
Remember this when downloading free apps which are not open source.
DnaPolymerase said:
If you're not paying it, you are the product being sold.
Remember this when downloading free apps which are not open source.
Click to expand...
Click to collapse
Like facebook which sells our data
Sent from my MT11i using Tapatalk 2
Calamitous with Ninesky
Hi,
I stumbled upon XDA Developers forum today and I was so grateful to find this write-up; it was the only honest review I could find of Ninesky. So, thank you.
I want to share an experience our family went through a few weeks ago. Perhaps it will answer some of your questions and alert some users out there of what this browser could do. We have an unfortunate incident happen to our child: My little boy received an android tablet for a gift this October. He was so eager downloading all the apps and games he could find, and in about a month, it was completely personalized. We regularly monitored his downloads, the games he played, and the apps he utilized.
Much to our regret, we really did not give much thought to the browsers he had installed. He had more than three at one point and Ninesky was always in the background. Sadly, whenever he would search for apps, we later discovered Ninesky directly linked him to several stores that was not common to Google or Firefox. Some of them had Anime icons (mostly innocent looking), nicely titled games for their tiles. Some apps were legitimate and very cool games; however, some apps were direct links to hard-core porn websites and a whole universe of filth (not excluding child-porn). They attached themselves to the tablet like trojans and was quite aggressive in linking the user to overseas app stores (inappropriate). Every time a game would be uploaded from one of these stores, it gives auto-access to these atrocious websites and videos. Because Ninsky always functioned in incognito--one of it's touted features--we almost had no access to the history or cookies when this browser was used. Almost anyway ... it took us hours (and some hacking) to track and identify what was really going on, the seeming source of it was this "sophisticated" browser.
So the catch may be that this browser has no advertisements because it plays host to several groups funding the porn industry. That's my suspicion anyway, based on what we went through.
I cannot begin to say how grieved we are that our son was exposed to all this, especially that we discovered it so much later. We thought we paid attention. That being said, he's back to playing with his remote control car outside, where life is a bit less complex.
More power to your forum and thanks again.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
xenofont said:
Hi everybody!
I recently started looking for a browser to replace the stock one and I think I installed every possible option there is without giving much thought to the consequences - app permissions and possible violation of my privacy and misuse of my data.
So I found what I thought was a really nice and well-functioning browser called Ninesky from the Android market.
Luckily for me I did not get to use it for long, before I detected a strange pattern - Ninesky would automatically start itself upon boot, connect to a server in China, upload some data and receive some back and then just sit there and wait idly.
The server that it connects to belongs to a company called aBitCool, which is, according to Bloomberg, an ISP in China.
So I kill it off and after a while it's back, doing the same thing. I also noticed a similar behavior for Dolphin HD, except that it would send data just once very quickly after boot-up and then close itself and stay quiet. That led me to Google it a little, which in turn led me to an existing thread about Dolphin HD on this forum.
So here are my noob questions that I hope somebody can answer, please:
1. Can somebody take a look at Ninesky browser and let us all know what kind of data it is transmitting about its users upon boot and maybe even later on during the actual use of the browser? The list of permissions that Ninesky asks for is huge and that makes me a little worried. Also, Ninesky runs a "safety check" of every URL visited. I wonder what that really is.
2. Say it would try to steal information from its users - would it be possible for the app to somehow get access to my stored usernames and passwords from other programs (such as Gmail or Skype) or are these encrypted? I presume that if I were stupid enough to let Ninesky's password manager "remember" my usernames and passwords for certain websites then that information would be easily accessible to them.
3. Can an app with such permissions also function as a keylogger?
4. I can understand why folks here would write some apps on their own and share them with the rest of us. I can understand why a developer or a company would write an app and make one version available for "free" or as an ad supported one and/or offer a premium version for $$$. At the end of the day developers need to eat and pay their bills just like the rest of us and companies are (for the most part) profit-seeking institutions (unless they are GE or MS that have money to burn). That said - why for the love of god would anybody, other than an enthusiast, develop a browser, for which they will not ask for any $$ or won't even display any ads in it? Where is the catch? Now, I know that Opera and Firefox get money from Google to use it as their default search engine, but would this really apply for a few random Chinese companies? Where is the catch?
Thank you.
Click to expand...
Click to collapse

Medialets & Zestadz Servers (Ad Blocking)

I have checked several of the major Host ad blocking files available on the web and none reference Medialets & Zestadz Ad Server locations. Lookouts "Ad Network Detector" app found several apps using these companies to host ads and I want to block them via the host file.
I was using AdFree until I found AdAway, which has far more options, including using several host file update locations and manually entering ad servers to block. AdAway uses the same host file source, as well as several others but none of these reference Medialets & Zestadz. Apparently Medialets is now the worst of the bunch, with ads that can collect anything and everything on your phone.
This article in PC Magazine references the Medialet bstards but they don't list the ad server location like they do with several other ad services.
http://www.pcmag.com/article2/0,2817,2383261,00.asp
AdMob which seems to be the most common is just as bad, though their servers are at least known and are included in my host blocking.
"Veracode then drilled down to see what type of data each network was collecting. AdMob accessed GPS location, application package name, and application version information, and "there were variable references within the ad library that appear to transmit the user's birthday, gender, and postal code information," Veracode said." ​
Unfortunately, as I stated above Medialet's servers don't seem to be known to the public and were not listed in the article. A Google search comes back with nothing.
"Medialets library accesses the device's GPS location, bearing, altitude, android_id, connection status, network information, device brand, model, release revision, and current IP address."​
Zestadz is also an unknown. I can't seem to find any info on their ad servers, and they are not referenced in any of the major host files so I can only assume they are not being blocked.
Spyware in PAID Apps!
The obnoxious thing is that Weather Bug Elite uses Medialet even though the app is the paid version. They say that its disabled in the paid "elite" version and is only active in Weather Bug Free, but I don't trust those Medialet a-holes and want to block them at the host level.
Zestadz are used in Flight View Elite, another paid app I own. Same situation above applies. I also found AdMob, AdWhirl and Millennial also embedded in the paid app.
Unfortunately, I can't just go DroidWall these apps as they both need network access so host blocking the ad servers is the only other way I know to prevent them from spying. Anyone know the ad servers for these two companies?
UPDATE: I contacted the parent company who owns WeatherBug and just started entering extensions until I got someone on the phone. I told them I wanted to speak to their legal department regarding a potential lawsuit, and they immediately forwarded me to someone who after some hold time told me "Medialet is NOT suppose to be part of the paid WeatherBug [IE: WeatherBug Elite], and if its showing up then our engineers need to remove it from the application." He said he would be getting back to me on the matter. Does anyone here actually believe this was a legitimate oversight? I am so tired of this privacy invasion crap. Companies think they can do whatever they want until they get caught and just play dumb when it happens.
On to whoever makes FlightView. Going to raise some hell them next. Will update. Still trying to figure out Medialets & Zestadz ad server info. If I can pry it out of these two companies I will post the information as well.
UPDATE 2: The "Office Manager" of Flightview is out of the office until Monday and the tech support department is in a meeting. I will try back later (or Monday) but even though I was [or at least started off] extremely polite, the rep I talked to was a total *itch and tried to dodge my questions on in-app spyware every way possible. Will update when I have more info.

Google suspended my app !

Hey I am new to android development ! I have developed an Live TV streaming app, which was rejected due to Intellectual Property. I thought it was because of channel art/icons, I had downloaded the app icon from FreePik.com and even gave them credit in About section of my app after changing all the copyrighted channel icons (and replacing them with my default channel art) I tried to republish the app ! but this time it was suspended I started to panic because it was the second app which was suspended !! :crying: It had no copyrighted content (I think) , then why was it suspended ? I got an e mail regarding the suspension
the reason was same (Intellectual Property) I don't really know what that means was it because of the channels or any other reason, I have even tried to contact support(by e mailing them through my developer console) but they did not reply what should it do ??
Thanks in advance,
CR Suthar
What content your app is streaming ? How do you know that it is not copyrighted ?
I also have one suspended by Google. They marked it as Spyware. Even my purpose is to help owner of the devices record their own phone call, their own SMS and their own location.

what is Andr.Trojan.Fake Telegram ?

Hi
i live in iran and recently iranian government forcing teachers and students to install an app, this app is not in play store and users must sideload it. so i suspect to this app and checked it in VirusTotal.com and found it:
https://www.virustotal.com/gui/file...259f76b3df94b045abd50e88b9e1f980b5d/detection
now my Q is detection is valid ?
Mehrdad.A said:
Hi
i live in iran and recently iranian government forcing teachers and students to install an app, this app is not in play store and users must sideload it. so i suspect to this app and checked it in VirusTotal.com and found it:
https://www.virustotal.com/gui/file...259f76b3df94b045abd50e88b9e1f980b5d/detection
now my Q is detection is valid ?
Click to expand...
Click to collapse
I' no security expert but my opinion for what it's worth.
Probably a false positive as it's only one detection. That said the app uses Iranian DNS (so government could potentially track your activity), it checks for root, and also has the following (see 2nd page of report) which could be fine but could also leak info to authorities you'd maybe not want to, though all also have legitimate functions.
Function name Detail info
ContentResolver;->query Read database like contact or sms LocationManager;->getLastKnownLocation Get last known location
android/app/NotificationManager;->notify Send notification getRuntime Get runtime environment
java/net/URL;->openConnection Connect to URL
java/net/HttpURLConnection;->connect Connect to URL
Camera;->open Open camera
HttpClient;->execute Query for a remote server
Also keep in mind an app can pass these tests by Antivirus but still use quite legitimate functions to leak data you maybe don't want to the app developers. Or worse download other files later that could be malicious, at the end of the day you need to trust both phone manufacturer & app producers to a large degree.

Categories

Resources