Discussion Forums  >  Plugins, Customizing, Source Code

Replies: 14    Views: 169

AppOne
buzztouch Evangelist
Profile
Posts: 348
Reg: Apr 03, 2012
London
13,980
03/20/13 12:28 PM (12 years ago)

Apple just called me!

Apple just called me because they just ran a test on one of my Buzztouch apps that's been in the store for a couple of weeks and says it is collecting user's UDIDs and mac addresses without asking permission. Is there any way a Buzztouch app could be doing this? The app also has Revmob & Socialize...
 
theMonster
Code is Art
Profile
Posts: 435
Reg: Oct 18, 2011
US
8,050
like
03/20/13 12:32 PM (12 years ago)
It's likely Socialize that's doing this. That or Revmob. Last I check BT is collecting NO data other than the time stamp and config info from the servers. -tM
 
Absentia
buzztouch Evangelist
Profile
Posts: 960
Reg: Oct 20, 2011
Alaska
20,600
like
03/20/13 12:35 PM (12 years ago)
Yikes! Going by the title I thought this was going to be a positive thread :( From what I can remember, Apple started cracking down on UDIDs a while ago - I can't imagine that huge platforms such as Buzztouch and Socialize would still be using them. My first guess would be that RevMob is the issue...I would eMail them (RevMob) about it asap. I'm curious to hear what they say considering that RevMob is integrated in every single one of my apps kind of scary how Apple just randomly tests apps
 
AppOne
buzztouch Evangelist
Profile
Posts: 348
Reg: Apr 03, 2012
London
13,980
like
03/20/13 01:14 PM (12 years ago)
Yep will email them and let you know what they say. Just looked all this stuff up for the first time but this article seems to sum up the problem: http://appdevelopermagazine.com/?ref=read_story&s=262&title=Apple-Starts-Rejecting-Apps-Using-Cookie-Tracking-Methods
 
Dragon007
Lost but trying
Profile
Posts: 1509
Reg: Dec 17, 2011
London
20,590
like
03/20/13 01:30 PM (12 years ago)
Second Abs, scary post! Please keep us posted.
 
denikov
Lost but trying
Profile
Posts: 46
Reg: Dec 26, 2011
Reno Nevada
10,360
like
03/20/13 04:16 PM (12 years ago)
That sucks...I was planning on using deviceId in my Custom URL to skip the login process for my app. From my understanding, that method will be getting the UDID of the user's phone... I haven't tested this yet, I heard it was different with iOS...what if you just put it in permissions, like in Android, that you will be collecting device data or something like that? Denis
 
chris1
Code is Art
Profile
Posts: 3862
Reg: Aug 10, 2012
Austin, TX
50,120
like
03/20/13 05:46 PM (12 years ago)
Apple is planning on deprecating UDID's - they're moving to vendor-specific ID's. Basically your phone will have a different UDID for each app vendor. If you delete all the apps from a particular vendor and then later install one from that vendor, it will generate a new vendor ID. Which means it is not a good source of identifying information anymore. I actually just investigated all this for a custom plugin I'm working on for MrDavid that I plan to release to the market once I'm finished. The plugin allows for a certain action to be done only once, and I needed a way to make sure the user wouldn't delete the app and reinstall it just to redo the action. Unfortunately, there's not a foolproof way of doing this without going to good old-fashioned logins via an online sql database or by saving data to the user's iCloud. (And even then, that latter method isn't foolproof I don't think). But, if you're okay with a little less foolproof method, here's what I did: 1) Generate a unique ID via CFUUIDCreateString 2) Save the ID to a keychain entry on the device. 3) Retrieve the ID from the keychain whenever you need it That way, if the user deletes the app, the data persists in the keychain. The only flaw in that approach is if the user decides to factory reset their device - then the keychain is erased of course. But short of that, it's a decent method.
 
Absentia
buzztouch Evangelist
Profile
Posts: 960
Reg: Oct 20, 2011
Alaska
20,600
like
03/24/13 10:18 AM (12 years ago)
@AppOneBeta - Have you gotten anything figured out yet?
 
AppOne
buzztouch Evangelist
Profile
Posts: 348
Reg: Apr 03, 2012
London
13,980
like
03/26/13 11:25 AM (12 years ago)
Revmob are still looking into it... does anyone know a simple way of working out exactly which revmob sdk you are using? I can't find a version number anywhere.
 
Absentia
buzztouch Evangelist
Profile
Posts: 960
Reg: Oct 20, 2011
Alaska
20,600
like
03/26/13 01:46 PM (12 years ago)
I could never figure out how to find the version number - I have a sticky note on my desktop that I use to keep track of all my SDK versions
 
AppOne
buzztouch Evangelist
Profile
Posts: 348
Reg: Apr 03, 2012
London
13,980
like
04/07/13 04:31 PM (12 years ago)
Ok, there will be an update from Revmob next week that I've been told will fix the bug that may have set off Apple's warning.
 
AppOne
buzztouch Evangelist
Profile
Posts: 348
Reg: Apr 03, 2012
London
13,980
like
04/07/13 04:31 PM (12 years ago)
Yeah, I need to keep better track of my sdks!
 
Absentia
buzztouch Evangelist
Profile
Posts: 960
Reg: Oct 20, 2011
Alaska
20,600
like
04/07/13 04:42 PM (12 years ago)
Oh, ok sweet...hopefully I don't get blacklisted before then
 
mysps
Code is Art
Profile
Posts: 2082
Reg: May 14, 2011
Palma
33,320
like
04/08/13 12:00 PM (12 years ago)
@AppBetaOne -- could have been Revmob.They have released a new sdk version that doesn't collect the UDID 5.4.0 (2013/04/05) New UDID are not collected anymore. edit - sorry i didnt see your last post. did you get the new sdk?
 
AppOne
buzztouch Evangelist
Profile
Posts: 348
Reg: Apr 03, 2012
London
13,980
like
04/08/13 04:59 PM (12 years ago)
yeah installed it
 

Login + Screen Name Required to Post

pointerLogin to participate so you can start earning points. Once you're logged in (and have a screen name entered in your profile), you can subscribe to topics, follow users, and start learning how to make apps like the pros.