应用宝商家两个风险
APP以隐私政策弹窗的形式向用户明示收集使用规则,但未见清晰明示APP收集设备MAC地址、软件安装列表等的目的方式范围,用户同意隐私政策后,存在收集设备MAC地址、软件安装列表的行为。
检测结论
存在风险
行为阶段 调用时间 行为名称 触发频率(次/秒) 行为权限 主体类型 主体名称 包名 详情 函数调用栈
APP前台运行时 2024-05-24 10:32:08 获取OAID 3 SDK 移动智能终端补充设备标识体系统一调用SDK com.bun {} "com.bun.miitmdid.core.MdidSdkHelper.InitSdk(android.content.Context,boolean,com.bun.supplier.IIdentifierListener)
java.lang.reflect.Method.invoke(Native Method)
io.dcloud.h.a.d.b.g.a(Unknown Source:27)
io.dcloud.h.a.d.b.g.b(Unknown Source:1)
io.dcloud.h.a.d.b.g.c(Unknown Source:2)
io.dcloud.h.a.d.b.i.b(Unknown Source:35)
io.dcloud.h.c.c.b.b.e.b(Unknown Source:7)
io.dcloud.h.c.c.b.b.e.a(Unknown Source:36)
io.dcloud.h.c.c.b.b.d.b(Unknown Source:1)
io.dcloud.feature.gg.dcloud.ADHandler.pull(Unknown Source:35)
io.dcloud.feature.gg.dcloud.AolFeatureImpl.doForFeature(Unknown Source:137)
io.dcloud.feature.gg.AolFeatureImplMgr.doForFeature(Unknown Source:5)
io.dcloud.a.a(Unknown Source:16)
io.dcloud.b$a.run(Unknown Source:5)
android.os.Handler.handleCallback(Handler.java:873)
java.lang.reflect.Method.invoke(Native Method)
"
APP前台运行时 2024-05-24 10:32:08 获取OAID 3 SDK 移动智能终端补充设备标识体系统一调用SDK com.bun {} "com.bun.miitmdid.core.MdidSdkHelper.InitSdk(android.content.Context,boolean,com.bun.supplier.IIdentifierListener)
java.lang.reflect.Method.invoke(Native Method)
io.dcloud.h.a.d.b.g.a(Unknown Source:27)
io.dcloud.h.a.d.b.g.b(Unknown Source:1)
io.dcloud.h.a.d.b.g.c(Unknown Source:2)
io.dcloud.h.a.d.b.i.b(Unknown Source:35)
io.dcloud.h.c.c.b.b.e.b(Unknown Source:7)
io.dcloud.h.c.c.b.b.e.a(Unknown Source:36)
io.dcloud.h.c.c.b.b.d.b(Unknown Source:1)
io.dcloud.feature.gg.dcloud.ADHandler.pull(Unknown Source:35)
io.dcloud.feature.gg.dcloud.AolFeatureImpl.doForFeature(Unknown Source:137)
io.dcloud.feature.gg.AolFeatureImplMgr.doForFeature(Unknown Source:5)
io.dcloud.a.a(Unknown Source:16)
io.dcloud.b$a.run(Unknown Source:5)
android.os.Handler.handleCallback(Handler.java:873)
java.lang.reflect.Method.invoke(Native Method)
"
1 个回复
DCloud_Android_YJC
参考Android平台各功能模块隐私合规协议,在隐私政策中补充收集mac、安装列表以及OAID的部分