News for hackers. Stuff that matters.
Re:Ring Doorbell App Packed with Third-Party Trackers by boboguitar on Tuesday January 28, 2020 @12:07PM (#22171323)
The user data for Google is just crashlytics. Saved a few people a click.
Re:Ring Doorbell App Packed with Third-Party Trackers by rapnie on Tuesday January 28, 2020 @12:18PM (#22171470)
But besides Google there is more than just crashlytics (and Firebase Analytics). It contains 11 trackers in total, and requires 30 permissions:

https://reports.exodus-privacy.eu.org/en/reports/com.ringapp...

Re:Ring Doorbell App Packed with Third-Party Trackers by izacus on Tuesday January 28, 2020 @01:12PM (#22172264)
Yeah, that's shady. But Google and Facebook are the only ones highlighted in the title.
Re:Ring Doorbell App Packed with Third-Party Trackers by reaperducer on Tuesday January 28, 2020 @12:09PM (#22171345)
The user data for Google is just crashlytics

Is there an opt-out? Or, more importantly, was there an explicit opt-in?

Data from crashes on my device is still my data, not Google's. Google can pop up an alert telling me things went pear-shaped, and then ask to send it back to the devs for analysis.

Re:Ring Doorbell App Packed with Third-Party Trackers by izacus on Tuesday January 28, 2020 @12:19PM (#22171486)
Every single app on your phone will use such service (Android or iOS,).

You're not wrong about ownership of data. But highlighting Ring and Google in this manner is some seriously biased and dishonest reporting.

Re:Ring Doorbell App Packed with Third-Party Trackers by jrumbut on Tuesday January 28, 2020 @01:02PM (#22172104)
This is a company already trusted with extremely sensitive information and who have suffered a stream of stories suggesting they may not be fulfilling that trust in the way a reasonable customer might expect, all the while while charging users enough of a price that the service isn't obviously ad/data sale supported.

The bar should be a lot higher for them, it's not some free tic-tac-toe app.

Re:Ring Doorbell App Packed with Third-Party Trackers by amiantos on Tuesday January 28, 2020 @12:57PM (#22172036)
iOS crash reporting and analytics are built in, but requires explicit user opt-in. It's not a requirement that an iOS app use Crashlytics or similar to get this sort of data, so saying "every single app will use such service" is not exactly truthful. And, besides, saying that "everyone does it" is not an excuse for the behavior.
Re:Ring Doorbell App Packed with Third-Party Trackers by UweSchmidt on Tuesday January 28, 2020 @12:37PM (#22171701)
Highlighting Ring makes sense as it represents a new dimension in terms of data collection and data risk. Highlighting Google and Facebook makes sense as they are the major data collectors who take great liberties in using the data to help undermining democracy and manipulate individuals through hyper targeted advertisements.
Re:Ring Doorbell App Packed with Third-Party Trackers by 7777fps on Tuesday January 28, 2020 @12:26PM (#22171558)
Well maybe Ring shouldn't have bundled so many third party trackers.

If it really were just crash reporting, this would have probably gone unreported on.

Re:Ring Doorbell App Packed with Third-Party Trackers by UweSchmidt on Tuesday January 28, 2020 @12:40PM (#22171753)
Worth noting that "crash reporting" is very much worth reporting on and paying attention to, as transmitting a lot of sensitive data in crash reports could be beneficial to fixing bugs (but obviously not beneficial to the indiviual's rights).
Re:Ring Doorbell App Packed with Third-Party Trackers by bradly on Tuesday January 28, 2020 @01:02PM (#22172105)
Crash reporting can be important, but there isn't a requirement to use an advertising company to facilitate it.
Re:Ring Doorbell App Packed with Third-Party Trackers by avree on Tuesday January 28, 2020 @02:26PM (#22173132)
This sort of pedantic hand-wringing is tiring. Google sells many things, one of which is advertising. Firebase Crashlytics may be free, but it's made available by Google in the hopes that developers pay for Firebase's full suite of paid offerings—it's not to populate additional user data to their ad or search algorithms.
Re:Ring Doorbell App Packed with Third-Party Trackers by bradly on Tuesday January 28, 2020 @02:32PM (#22173191)
> it's not to populate additional user data to their ad or search algorithms.

How do you know this?

Is it "pedantic hand-wringing" to not want my DNA analyzed by an advertising company as well?

Re:Ring Doorbell App Packed with Third-Party Trackers by Kalium on Tuesday January 28, 2020 @12:32PM (#22171644)
This may be an excessively optimistic read. A person has to know a reasonable amount about software systems and common development practices to decide crash reporting isn't worth writing about.

The bar to deciding that Google is getting user's data somehow and this is newsworthy is lower, and requires no grasp of underlying details. Technology journalists are often journalists first, and technologists second if at all. I don't blame them, it's the nature of the job.

Re:Ring Doorbell App Packed with Third-Party Trackers by bosswipe on Tuesday January 28, 2020 @01:02PM (#22172103)
The crash data is needed for debugging. It's debatable if it's your data, it's the developer's misbehaving code. An app can be architected so more of the code runs on the server than on the client, if an action you took on the client causes a crash on ny server I'm not going to ask you for permission to look at my crash logs.
Re:Ring Doorbell App Packed with Third-Party Trackers by pdonis on Tuesday January 28, 2020 @03:57PM (#22173940)
> The crash data is needed for debugging.

Not by me. I'm not going to debug the app; I'm just going to kill it and restart it. If the developer of the app wants my data to help his debugging, he needs to ask.

> if an action you took on the client causes a crash on my server I'm not going to ask you for permission to look at my crash logs.

Of course not, but your crash logs aren't coming from my phone. If you want to look at data from my phone, you need to ask.

Re:Ring Doorbell App Packed with Third-Party Trackers by julianozen on Tuesday January 28, 2020 @12:38PM (#22171727)
Is facebook just for auth?
Re:Ring Doorbell App Packed with Third-Party Trackers by givinguflac on Tuesday January 28, 2020 @12:51PM (#22171920)
it states it shares with Facebook regardless of you having an account with fb
Re:Ring Doorbell App Packed with Third-Party Trackers by julianozen on Tuesday January 28, 2020 @03:52PM (#22173910)
I think this is part of the SDK initialization which is needed regardless of auth (unfortunately)