Ft.com без обиняков нашла угрозу от передачи данных на серверы "Яндекса" через AppMetrica — ведь из-за этого риску подвергаются крутые чуваки, которые попадут под колпак москвичей и чьи домашние сети будут атакованы.
Yandex has software in the form of a software development kit, or SDK, called “AppMetrica”. SDKs are building blocks used by developers to create apps. The Google Maps SDK, for instance, allows apps to embed mapping functions rather than build that functionality from scratch. Many SDKs are offered for “free” in exchange for access to user data that aids targeted advertising.
Among the apps with AppMetrica installed are games, messaging apps, location-sharing tools and hundreds of virtual private networks — tools designed to allow people to browse the web without being tracked. Seven of the VPNs are made specifically for a Ukrainian audience. Total installs of apps that include the AppMetrica SDK are in the hundreds of millions, according to Appfigures, an app intelligence group.
“The AppMetrica SDK claims to provide appropriate services, all while phoning home to Moscow with deeply invasive metadata details that can be used to track people across websites and apps,” said Edwards, the researcher.
“For people with a high-threat profile or working in high-profile jobs, using apps that send this data to Moscow is dangerous and can potentially lead to attacks on home networks or other forms of digital surveillance.”