Lumen Privacy Monitor Detects Apps That Leak Personal Data

Status
Not open for further replies.

HarborFront

Level 71
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,026
Most of us click on the Agree button when we install apps without actually reading the privacy agreement.

But some new research from Princeton University and other bodies reveals that many apps use a network of third-party services  —  often invisible to the user – that provide analytics, social network integration, and monetization.

Often, these mobile advertising and tracking services have an intimate view of the user’s activity and are keen to harvest personal data.

In all, the team identified 2,121 trackers — 233 of which were previously unknown to popular advertising and tracking blacklists. These trackers collect personal data including Android IDs, phone numbers, device fingerprints, and MAC addresses.

Most of these trackers come from just a few parent organizations. Sixteen of the 20 most pervasive trackers are owned by Alphabet. Other parent organizations include Facebook and Verizon. “There is a clear oligopoly happening in the ecosystem,” says Rishab Nithyanand, a Mozilla Fellow embedded at research institute Data & Society and one of the report’s authors.

Cross-device tracking is widespread too. The study finds that the vast majority of mobile trackers are also active on the desktop web, allowing companies to link together personal data produced in both ecosystems. “Cross-platform tracking is already happening everywhere,” Nithyanand says. “Fifteen of the top 20 organizations active in the mobile advertising space also have a presence in the web advertising space.”

While new laws like GDPR aim to guard user’s personal data, the flow of data across national boundaries and the less than transparent way many companies collect it make it hard to regulate.

The Mozilla team wants to help users understand what is happening to their data. “…we want to give users the knowledge and the power to make informed decisions by themselves to prevent abusive practices. Our goal is to empower mobile users, and not to weaken the developers’ position,” Nithyanand says. Apps like Lumen Privacy Monitor can give users control over other app’s communication activity.

You can read more in the full research paper.

The shady world of mobile app tracking

More here

Here's how to find out which Android apps are leaking your personal data

Get the app from Google Play Store
 

HarborFront

Level 71
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,026
To find out apps that leaks my data, I use XPrivacyLua.

M66B/XPrivacyLua

Regards,

1) Is rooting required?
2) Does this app requires a local VPN?
3) Where exactly is the Xposed framework module? Went into the link but can't find the download link. I'm using android 6.0.1 Marshmallow

Lumen Privacy Monitor requires a local VPN which is affecting the selection of a dedicated VPN/firewall/adblocker
 
Last edited:
  • Like
Reactions: lowdetection

lowdetection

Level 7
Verified
Well-known
Jul 1, 2017
317
1) Yes, and this could be potentially a security risk too, without potentially, is it,
2) No local VPN needed, not like AdGuard,
3) The Xposed framework module is here XPrivacyLua | Xposed Module Repository

Of course, using Xposed as active trigger the SafetyNet value to false, and cannot see Netflix or SuperMario Run on PlayStore, but if like me that use Magisk can be triggered off with a simple reboot.

Yes, this module is compatibile up to Oreo 8.1, old version running on Lollipop called Xprivacy was a little more complicated to manage, the new one is pretty nice and clean.

Regards,
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top