-

Tue, 16 Aug 2022 20:25:39 +0200

sneak via smallcircles (Humane Tech Now)

sneak@s.sneak.berlin

OSMAnd is spyware that leaks your travel history to the OSMAnd developers, even if you have analytics/telemetry turned off!

https://github.com/osmandapp/OsmAnd/issues/15058

https://github.com/osmandapp/OsmAnd-iOS/issues/2115

This unethical and consent-violating data leak exists in both the iOS and Android versions. It's not an accident - they are deliberately phoning home with a unique identifier.

show all 15 comments

Tue, 16 Aug 2022 21:08:44 +0200

Hans van Zijst

hans@social.woefdram.nl

Long thread, but that claim seems far fetched.

Wed, 17 Aug 2022 04:19:21 +0200

sneak

sneak@s.sneak.berlin

@hans it sends a unique and permanent tracking id on every map download.

Wed, 17 Aug 2022 11:53:52 +0200

Hans van Zijst

hans@social.woefdram.nl

@sneak That doesn't imply it "leaks your travel history", that's what is far fetched. It can "track" which maps you download, that's not travel history, is it?

Wed, 17 Aug 2022 12:14:55 +0200

sneak

sneak@s.sneak.berlin

@hans client ip is city level geolocation. when you send a persistent unique id from changing client ips over time, i know which cities you were in, and when.

Wed, 17 Aug 2022 12:24:48 +0200

Hans van Zijst

hans@social.woefdram.nl

@sneak I've downloaded a lot of maps of areas I've never been to. So unless they actually follow my GPS coordinates, I don't see it as "leaking travel history".

Wed, 17 Aug 2022 12:31:10 +0200

sneak

sneak@s.sneak.berlin

@hans this has nothing to do with which maps you download. you don't seem to understand ip geolocation.

Wed, 17 Aug 2022 12:37:06 +0200

Hans van Zijst

hans@social.woefdram.nl

@sneak I've read the thread on Github, and I think I understand enough to know that this kind of "tracking" isn't a problem. I don't wear a mask and pay with cash only while doing groceries because the cashier could track my purchases either.

Sure, maybe OsmAnd could work without that ID, but again, I find your claim far fetched.

Fri, 19 Aug 2022 07:51:02 +0200

sneak

sneak@s.sneak.berlin

@hans it’s fine if you don’t care about your own personal privacy but that doesn’t give anyone license to track people who do (and don’t consent to such tracking)

Fri, 19 Aug 2022 11:24:51 +0200

Hans van Zijst

hans@social.woefdram.nl

@sneak Again, I don't see this as tracking. I have a serious problem with online tracking, that's why I never visit sites like Google or Facebook, but an enterprise setting an ID do check the number of maps I download and nothing else, is not a privacy concertn. Not for me, at least.

It's a good thing that you told the world about this, so that people have a choice. Not going to be easy, I think, because every alternative that I know of is a far bigger privacy risk, but hey. But telling the world by calling it "spyware" and "leaking travel history" is a bridge too far, I think.

Fri, 19 Aug 2022 17:10:32 +0200

sneak

sneak@s.sneak.berlin

@hans that's because you don't understand tracking. it is objectively tracking regardless of whether you comprehend it as such or not. the idea that it needs informed consent is your clue.

Fri, 19 Aug 2022 17:24:32 +0200

Hans van Zijst

hans@social.woefdram.nl

@sneak

that's because you don't understand tracking.

Yeah, let's go with that.

Fri, 19 Aug 2022 17:40:17 +0200

sneak

sneak@s.sneak.berlin

@hans if it weren't literally designed to discern one user from another, no unique identifier would be necessary.

Wed, 07 Dec 2022 07:24:44 +0100

WATERB~1.EXE

waterbear@scicomm.xyz

@sneak it seems to have been fixed back in October, which is great since I use it a lot

Thu, 08 Dec 2022 14:16:51 +0100

sneak

sneak@s.sneak.berlin

@waterbear not fixed. read the issue.

Thu, 08 Dec 2022 22:20:46 +0100

WATERB~1.EXE

waterbear@scicomm.xyz

@sneak well I read this and I came up with:

"Sneak: you are wrong. It is time to admit you came to wrong conclusions and time to publicly show you are able to learn when presented with new facts. Thank you."

https://github.com/osmandapp/OsmAnd/issues/15058#issuecomment-1214373629