Decompiled Russian govt “Social Monitoring” app reveals awful privacy violations (opens in new tab)

(github.com)

3 pointsthrowaway100x5y ago1 comments

1 comments

- The APP gets full set of permissions, GPS, camera, locations, phone access, settings

- All collected data is sent in full to the state-associated agency, no encryption, plain HTTP

- Some shady foreign SaaS is used for face recognition (identix.one)

- Developed by a contracting firm, and paid by the state

- MAC/IMEI are disclosed via an identification QR code

j / k navigate · click thread line to collapse

- The APP gets full set of permissions, GPS, camera, locations, phone access, settings

- All collected data is sent in full to the state-associated agency, no encryption, plain HTTP

- Some shady foreign SaaS is used for face recognition (identix.one)

- Developed by a contracting firm, and paid by the state

- MAC/IMEI are disclosed via an identification QR code

j / k navigate · click thread line to collapse