Exodus Android App Tracker analysis

Android Apps: Exodus reveals trackers and permissions before installation

Posted on by Martin Brinkmann

Much of what happens during the installation of an Android app happens in the background. While Android may highlight permissions that an app requires, it stays silent when it comes to privacy.

Many apps include trackers and may also contain ads, but ad-free apps may still have trackers.

If you are particularly worried about tracking, you may find the free service Exodus useful. It is available as a web-based version that you can launch from any modern web browser.

To get started, type the name of an Android app in the search field at the top. You can type partial names and pick the app from the list of results. Other options are to type the apps’ unique handle or full Google Play URL.

The number of trackers and permissions is returned then. Select trackers to look through the list of trackers that the application references. Trackers are classified based on their purposes, e.g., advertisement, identification, or analytics.

Exodus uses colors to highlight the number of trackers and permissions. Green apps use 0 trackers and permissions. Yellow apps less than 5, and red apps more than 5.

A click reveals the total number of analyzed apps that use the particular tracker.

Note that Exodus does not decompile applications. It performs a “static analysis of APKs and compares Java class names with a list of trackers”.

In other words, there is a chance that trackers do get overlooked.

As far as permission go, these are also shown on the profile page of the app on the Exodus website.

Another useful feature is the ability to have new apps scanned. You need to supply the full Google Play Store or F-Droid URL for that.

The application will be analyzed, if it is unknown to Exodus. The makers note that apps with geographic restrictions cannot be scanned.

Verdict

Exodus, all in all, is a useful service. It highlights if an application uses trackers. If you do not want to be tracked, you may want to give it a try. Most Android apps use tracking in one form or another though.

Do you use services like Exodus to analyze apps before you install them? Or do you use something else to block trackers? Let us know in the comments.

Paint 3D end of support

Microsoft is retiring a Windows app this year that it at one time had high hopes for

Posted on by Martin Brinkmann

When it comes to the dozen or so Windows app that Microsoft ships with Windows, there are several that most users would probably never touch.

Of these, Paint 3D is probably high up on the list of the majority of Windows users. It sits there at the top with the likes of 3D Builder.

Paint 3d came out at a time when Microsoft wanted to push creativity and creating in Windows. It was set out to replace the original Paint application, which was a trustworthy, albeit basic, image editing app for Windows for a long time.

Many users were not pleased with Paint 3D and Microsoft’s course, as interface and functionality were changed. Eventually, Microsoft realized that Paint was the app that won the popularity contest and decided to deprecate Paint 3D.

Paint 3D is now beginning to show an end of support banner in its interface. First reported by Phantom of Earth on Twitter, the banner notifies users that the app will reach end of support soon.

It says:

Paint 3D won’t be available in the Microsoft Store or receive future updates on November 4, 2024.

It is a crushing defeat for the app, considering that a very similar message was displayed in the original Paint app at one time.

It said:

This version of Paint will soon be replaced with Paint 3D. Classic Paint will then become available in the Store.

Paint 3D is not getting the same treatment. The app is already no longer installed on new Windows devices. Soon, users won’t find it listed anymore on the Microsoft Store.

Microsoft does not say if it is going to remove the app if it is installed on user devices. It likely won’t, but it will certainly remind users that the app is no longer supported when it is run.

Do you have any favorites among the default Windows apps? Is Paint 3D on that list? Let us known in the comments below.

0.0.0.0 Day: decade-old vulnerability affects all browsers

Posted on by Martin Brinkmann

Security researchers have disclosed a vulnerability that affects all modern browsers. What makes it particularly worrisome is that it has been known for 18 years; that goes back to a time before Google even thought of creating Chrome.

The details:

  • The researchers call the issue 0.0.0.0 Day.
  • It allows malicious websites to interact with services that run on the local network.
  • This could lead to unauthorized access or remote code execution attacks on local services from outside the local network.

In other words: the security issue allows the circumvention of security protections by malicious websites. Chromium’s Private Network protection does not protect against this, neither does Firefox. Apple’s Safari browser was also vulnerable, but the company has released a patch that blocks access to 0.0.0.0.

The blog post provides a technical description of the vulnerability. It also explains why it took this long to react on it.

The researchers found a Mozilla bug listing that dates back 18 years. It shows that the developers were not sure whether the reported bug was a security issue, a bug, or no flaw at all.

How Google, Mozilla, and Apple plan to react

Researchers at Oligo disclosed the vulnerability to security teams of major browsers in April 2024.

  • Google: plans to block access starting in Chrome 128 and finalize the rollout by Chrome 133. Other Chromium-based browsers will get this as well.
  • Apple: has implemented a change that blocks destination host IP addresses, if the IP is all zeroes.
  • Mozilla: fix is in progress. Firefox is special, as it never restricted Private Network Access in first place. Will implement Private Network Access, but no ETA on this one.

The fixes are important, but so is standardization of the issue. HTTP requests to 0.0.0.0 should be added to security standards according to the security researchers.

Closing Words

The security researchers note that use of 0.0.0.0 on the Web is on the rise. They use counters provided by Chromium for this. According to those, it is used by 0.015% of all websites. While that may not sound like much, it equates to roughly 100,000 public websites that may communicate with 0.0.0.0.

Malicious actors may exploit the issue in their attacks. Oligo points out that ShadowRay, a recent attack that targets AI workloads, could be executed from browsers using 0.0.0.0 as the attack vector.

It is unclear if browser extensions such as Port Authority for Firefox provide protection against this kind of attack.

What is your take on this new vulnerability? Seems that there is always something new, or shall I say old, that is affecting the security of browsers. (via Born)

Android

Your Android smartphone could soon have a floating taskbar

Posted on by Martin Brinkmann

Android 15 could ship with a taskbar on smartphones. This taskbar works similarly to the one known from tablets or operating systems such as Windows.

Android Authority’s Mishaal Rahman discovered the taskbar feature recently and has published information about its functionality and current state.

Up until recently, taskbars on smartphones were frowned upon. Google, Apple, and the manufacturers of other mobile operating systems focused on minimalism instead.

While Google did implement a taskbar in Android 12 for Android tablets and the new foldable category of phones, it continued its work in future releases.

The initial release fixed the taskbar on the screen. One year later, Google introduced an option to hide the taskbar.

The idea behind this was simple: free up as much room as possible for apps or websites viewed by the user.

In Android 15 Beta 4, Rahman discovered a new “tiny” taskbar feature. While not enabled by default, Rahman found a way to enable it to check it out.

He published a video on YouTube that shows his efforts:

Here is what is known right now:

  • The smartphone taskbar functions exactly like its bigger cousin for tablets and foldables.
  • It has place for fewer shortcuts.
  • Google could implement both the old and new taskbar layout. The main differentiating factor is the position of the taskbar on the screen.

The taskbar for smartphones is a work in progress. It may be included in Android 15 because of that.

While not all Android users may want to use a taskbar on their devices, there are probably a few that like the idea. The main benefit is that it offers faster access to certain apps or functions.

Whether that is enough to warrant the display of the taskbar on the screen is up for the individual user to decide.

I would probably never use the feature outside of testing.

What is your take on this? Would you use a taskbar on Android devices, if Google would launch it as part of Android 15? Feel free to write a comment down below.

Disney+

Like Clockwork: Disney+ is getting another price increase

Posted on by Martin Brinkmann

Disney just announced that it will increase the price of Disney+ in the United States again. The company will charge $15.99 per month from October 2024 onward.

Here are the details:

  • Disney+ with ads: price increases from $7.99 to $9.99 per month.
  • Disney+ ad-free: price increases from $13.99 to $15.99 per month. The yearly price increases to $159.99.

Disney has more than doubled the price of its ad-free plan since its launch in 2019. Back then, customers paid $6.99 per month for the ad-free experience.

Disney-owned Hulu and ESPN are also increasing the price of subscriptions:

  • Hulu with ads: from $7.99 to $9.99
  • Hulu without ads: from $17.99 to $18.99
  • ESPN+ with ads: from $7.99 to $9.99
  • ESPN without ads: from $10.99 to $11.99

The Hollywood Reporter speculates that Disney wants to push more customers to a Disney Bundle subscription. It includes the ad-powered Disney+ and Hulu subscriptions for $10.99.

Considering that both Disney+ and Hulu cost $9.99 with ads already, it is “just” $1 extra to get both services. At least, until the next price increase that is.

Disney has not announced price increases for other regions. It is probably only a matter of time before it will announce those.

Expect more price increases from (most) major streaming providers in the coming 12 months.

Closing Words

Streaming services increase prices regularly, and it seems to work. Netflix is gaining subscribers, even though it has increased the price of its subscriptions several times in recent time.

There are only three options available to break this cycle:

  • Subscription-hopping – subscribe for a month or two, watch everything, unsubscribe. Never have more than one active subscription.
  • Buying physical – you may miss out on some shows, but what you buy is yours forever. Also option to sell again or buy used.
  • Don’t subscribe and do not buy media — Might work for some as well.

Are you subscribed to streaming services? If so, to which and why? Feel free to leave a comment down below.

Google TV Streamer

Google is replacing Chromecasts with Google TV Streamer boxes

Posted on by Martin Brinkmann

Google unveiled Google TV Streamer today. The box will replace the company’s own Chromecast devices to compete against the likes of Apple TV.

Here are the main details:

  • Retails for $99.99 (€119.99).
  • Google says CPU is 22% faster than Chromecast 4K.
  • Has double the RAM (4 GB) and 32 GB of storage compared to Chromecast 4K.
  • Supports Wi-Fi 5 (ac) and Bluetooth 5.1.
  • Comes with an Ethernet port and HDMI 2.1, which supports 4K HDR at 60fps.
  • HDR10(+), Dolby Vision, HLG, and Dolby Digital(+), and Dolby Atmos supported.

Google says that TV Streamer supports Matter and Thread, and that it comes with Gemini technology. Here, Google says that Gemini may provide “full summaries, reviews, and season-by-season breakdowns of content”.

Ambient mode, another new feature, turns an idle TV “into a work of art”. Integration of Google services allows pulling up photos and videos from Google Photos, using either voice or by typing.

The “biggest Google-Home-Panel” is not controllable with the remove. This allows users to control other smart devices, for instance cameras or door bells. Google-owned Nest support is also available.

Integration with Android is also available, which means that Android users may stream content from their devices directly on the Google TV Streamer connected display.

The not so good

While Google TV Streamer offers better functionality than Google Chromecast devices that came before it, it disappoints in some areas.

Here are the main ones:

  • The processor is just 22% faster than the Chromecast 4K model, which Google released in 2020. It remains to be seen how well it performs.
  • The device supports only Wi-Fi 5.
  • Only 32 GB of storage.

Only tests will show how well the device performs when compared to Apple TV or other premium boxes.

This may be an instant buy for heavy Google users. If you are already invested, say with Android and smart home devices, then you may like the idea of getting another option to control all these devices.

If you just want the best streaming box, this may not be it based on the hardware that you get. All in all, you may want to wait for the initial wave of reviews before you make a buying decision.

Do you own streaming boxes or sticks? If so, which do you use currently and why? Is the Google TV Streamer a box that you are interested in? Feel free to write a comment down below.

Zen Browser

Zen Browser: first look at new open source Firefox-based browser

Posted on by Martin Brinkmann

Recently, there has been a bit of a revival when it comes to forks of the Firefox browser. After Mullvad Browser, it is now Zen Browser that is trying to win the Internet by storm.

The Firefox-based browser is available as an alpha at the time of writing. Despite that, it felt very stable during tests.

The details:

  • Zen Browser is available for Windows, Linux, and macOS.
  • The browser is open source.
  • You can download an installer or a portable version.

Since it is based on Firefox, it shares many of its features with Mozilla’s browser. This includes most of the interface and settings, as well as support for extensions. The interface looks modern and clean.

Here are core differences to Firefox:

  • Tabs are displayed on the sidebar and not horizontally.
  • Split view support to display multiple sites at once.
  • Improved profile management controls.
  • Tab Groups support (coming soon)
  • Telemetry disabled by default.

There may be more. Feel free to leave a comment down below if you spot any other.

Using Zen Browser

Firefox users will feel at home when they use the browser. They can import browsing data and install Firefox add-ons in Zen Browser.

Chrome users who think Firefox looks dated may give the browser a try as well, especially since Chrome is soon disabling old extensions like uBlock Origin.

A core difference is that tabs are displayed on the sidebar on the left. There does not seem to be an option to move tabs to the classic horizontal position. Maybe that is coming at a later point.

The settings include a compact mode, which auto-hides the sidebar and displays it on hover. You may furthermore hide the top title bar as well in that mode.

Another option available is to make the URL bar floating when selected. This moves it to the middle of the browser window automatically.

The New Tab page displays just a search option by default. You can add recent shortcuts and Internet shortcuts with a click on the customize button. There is also an option to enable three types of wallpapers: solid color, abstract, or photos.

A sync feature is also available, which requires creation of an account. Major browser features, such as password management, spell checking, translations (via Firefox Translations), or Developer Tools, are also supported.

Closing Words

Zen Browser is updated regularly right now, but it is still an alpha that is in development. Most users may want to wait for the first stable release to give this browser a try, if they are interested in it.

Another thing that may need improving is that the website reveals little about the team behind the browser. While that is not always a necessity, it would improve trust in the project if that would be made clearer.

All in all, a browser to put on the watchlist to check out again in the future.

Have you tried Zen Browser? What is your take on the browser? Would you use it? Feel free to leave a comment down below.

Microsoft installs KB5001716 update on older versions of Windows

Posted on by Martin Brinkmann

If you still run an older version of Microsoft’s Windows 10 or 11 operating systems, then you may have noticed that Windows update KB5001716 was installed recently on your devices.

It is an important update, here is why:

  • KB5001716 is an update for Windows Update Service components.
  • The update enables Windows to download and install new feature updates for the device automatically.
  • It furthermore detects issues with the Windows Update service and notifies you about any that it finds.

In other words, it is designed to push new versions of Windows onto systems that are no longer supported or about to reach end of support.

Microsoft supports consumer editions of Windows for 18 months. The systems receive security updates and other updates during that time. Updates stop once the version of Windows reaches end of servicing.

Microsoft notes:

f your device is out of support, it is no longer receiving security updates from Microsoft and may become more vulnerable to security risks and viruses. For this reason, we strongly recommend that you update to the latest version of Windows. Each version of Windows is supported for 18 months. After support ends, you must update to a newer version of Windows to continue receiving Windows updates and security fixes.

Here is the (current) list of Windows versions that will receive the update:

  • Windows 11, version 21H2
  • Windows 10, version 22H2
  • Windows 10, version 21H2
  • Windows 10, version 21H1
  • Windows 10, version 20H2
  • Windows 10, version 2004

As you can see, Microsoft is pushing the update to all but the latest versions of Windows 11.

These versions of Windows do not receive the update at the time of writing:

  • Windows 11, version 23H2
  • Windows 11, version 22H2

While this won’t change anymore for Windows 10, expect Windows 11 Version 22H2 to be added to the list soon.

Most Windows users may want to upgrade to new versions of Windows, as it guarantees that security updates continue to be provided by Microsoft.

Users who do not want to upgrade yet or want to keep full control over the updating, may want to prevent the installation of KB5001716.

If the update is installed already, you may check out my guide on uninstalling Windows updates and blocking them afterwards.

Closing Words

Several Windows 10 and 11 versions reach end of servicing in the coming months. While most devices should be upgraded to a newer version by then, there will always be systems that are left behind.

In most cases, this may not be a deliberate decision and the update may help these users in keeping their systems supported.

Which version of Windows, if any, do you run currently? Any particular reason for that, if you do not run the latest version?

Chrome

Keep on blocking in a free world: how to switch from Chrome to Firefox

Posted on by Martin Brinkmann

Google Chrome users who have extensions installed may soon have some or even all of their installed extensions disabled by Google.

While all browser extensions may be impacted, it is ad blockers and privacy extensions that are impacted the most.

One example: uBlock Origin, arguably the most loved and powerful content blocker available for browsers, will not be offered anymore for Chrome and all other Chromium-based browsers.

This means that you cannot install the browser extension anymore in Chrome, Microsoft Edge, Vivaldi, Opera, and myriads others.

One exemption: Brave Software revealed recently that it plans to continue support for uBlock Origin. This would be the one exemption at the time of writing.

The developer of uBlock Origin has created a lite-version of the extension. Called uBlock Origin Lite, it remains available for Chrome. Its functionality is reduced, however.

Furthermore, users of Chrome who use uBlock Origin need to download and install uBlock Origin Lite manually. A click on the “find alternative” button in Chrome

How to find out if you are impacted by the change

Chrome Extensions Support
Google Chrome highlights extensions that will soon no longer be compatible with the browser

Do the following to find out if extensions that you have installed in Chrome are impacted:

  • Load chrome://extensions/ in the browser’s address bar. You may also open the page manually by going to Menu > Extensions > Manage Extensions.
  • If you see “These extensions may soon no longer be supported” at the top, you are affected by the change.

Tip: you can check out a detailed guide about this here.

Google lists all incompatible extensions. Each features a “find alternative” button, which opens a special page on the Chrome Web Store that highlights extensions that continue to remain compatible with Chrome in the future.

For uBlock Origin, Google suggests the following options:

  • uBlock Origin Lite
  • Adblock Plus
  • Stands Adblocker
  • Ghostery Tracker & Adblocker

While all block ads, none offers the functionality of uBlock Origin.

What you can do about it

You have just a few options at this point:

  1. Keep on using Chrome until Google disables the extensions. You may then extend support for about a year using Enterprise policies.
  2. Keep on using Chrome and use a different browser extension that works for you, hoping that Google does not introduce any other changes in the future that may impact it.
  3. Switch to Brave Browser. This is a valid option only if you want to keep on using uBlock Origin, AdGuard, uMatrix, or NoScript.
  4. Switch to Firefox or a Firefox-based browser. The extensions, including uBlock Origin, remain available and maintained for Firefox.

The first option is valid for all Chromium-based browsers, but it is temporary only. Google will remove the Enterprise policy next year, and that marks the end of support in Chrome.

As you see, you have a few options only. While you could keep on using a Chromium-based browser, Brave Browser, it is unclear for how long Brave will support the four special extensions.

Admittedly, it is also unclear for how long Mozilla will support the old extensions system. If it sees an uptick in users, as some Chrome users may migrate to Firefox because of the changes Google implements, it could very well be for a long time.

Are you affected by the change? Do you have any extensions that you rely on that would make you switch browsers, if your current favorite would not support them anymore? Feel free to leave a comment down below.

Android

Google Play Store could soon takeover updates for sideloaded apps

Posted on by Martin Brinkmann

Android Authority reports that Google is working on a new Play Store feature to take over ownership of sideloaded apps. This would allow Google Play to update apps not installed via the official Store.

A feature introduced in Android 14 allows application stores to update ownership of apps. When you download an app from a Store, this store has ownership. This means that it is responsible for pushing updates and other changes. It may also have the power to delete apps.

The option to change ownership was designed initially to prevent the installation of apps from a store that differed from the original.

Now, it appears that Google is working on a feature that allows Play Store to take over ownership. It seems that this is a manual process, for now at least.

The main benefit of this is that users may then update apps through the Play Store, provided that the app is also hosted on Google’s store for Android.

A leaked screenshot shows the listing of an app that was not installed from Google Play. The app shows an “update from Play” button. When users activate the button, Play Store is taking over ownership to update the app. Future updates will then be provided via Play Store and not the original Store.

Third-party app stores may also be able to use the feature in the future.

Closing Words

While the changing of ownership may be useful in some cases, for example when the original owner is no longer available or an app is no longer available in the original store, it may also cause issues for certain apps, especially if they differ from the Play Store version.

This should not work for apps that are not offered on the Play Store. Certain kinds of apps, including apps that let users download videos from YouTube, are disallowed on the Play Store. They can, however, be installed from third-party stores.

The best option to avoid this for now is to ignore the “update from Play” button when browsing the Play Store. It remains to be seen if Google will implement other changes related to the taking of ownership.

Do you sideload apps on Android? If so, what is your preferred download source for apps? Feel free to leave a comment below.