Exodus brings up false positives
- 0 Posts
- 6 Comments
Joined 6 months ago
Cake day: July 24th, 2025
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Well according to the Dev this might be false positives. Adding to the confusion. And indeed they are. The sources code don’t have them.
https://gitlab.com/fdroid/fdroiddata/-/issues/3717
Opened an issue about it
Closed this issue, false positives from exodus.
Its a bit confusing because F-Droid ship the schildichat version with Google trackers without saying it. One have to add the schildi repo to F-droid and download the FOSS version: https://s2.spiritcroc.de/fdroid/repo/?fingerprint=6612ade7e93174a589cf5ba26ed3ab28231a789640546c8f30375ef045bc9242
I can confirm that schildichat from f-droid contains 2 Google trackers after analysis :
603 tested signatures on 67125 classes (40361329)
Google AdMob Sentry
*Google AdMob 9com.google.ads.
*Sentry 698io.sentry.
file:///data/app/~~Opb2slJC07NYLm9e2C2ikw%3D%3D/de.spiritcroc.riotx-uWSIGBd1PzyWdDEl86q5NA%3D%3D/base.apk
MD5sum: 55da2edbc904165755632ae132f30ed5 SHA1sum: ed27b82c54dd62315c6a46935af66e4666549a3d SHA256sum: de365d9e2d8e3fa08b1501a0079a95cd0b37fee6186dbd9eba2a4c22d7268473
CN=FDroid,OU=FDroid,O=fdroid.org,L=ORG,ST=ORG,C=UK
SHA256withRSA
CERTIFICATE fingerprints: md5: c78350850dd5f3421f36d7cfbe0927bc sha1: 63ec0e3261dc3be0469bc68955bf58c0684ba52d sha256: 5d473a5169ef71aedcbca1da511210bab4aaff278c5ef785760df882954b1a99
Probably because its free account