Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security] Please list every single external service and hosting used by the app in a clear viea in an md and insider the application #236

Open
rr9845 opened this issue Jul 29, 2020 · 2 comments

Comments

@rr9845
Copy link

rr9845 commented Jul 29, 2020

Following https://cybercyber.co.il/?p=151 , please list every single service the application is uploading information to, and what information is uploaded.

That is requried to have conscious agreement to use the application.

There are different levels of infromation uploaded :
From as simple as accessing a remote server and sending some ID headers , to severe when locaiton data is uploaded to a server (should be an optional service and opt-in ) .

For example and I'm not saying each of this actions actually happen , I'm just asking for the real connections to be published:

This application connect and upload xxxx information to firebase which is hosted at google, the information which is uploaded to it is x.y.z Issue 16 and Issue 3

This application connect server hosted by wix, and retrieve xyz data from there .

This application connect to azure to retrive location informaiton , during the access the next headers and information is shared with azure.

etc.

E&OE

@kaplanlior
Copy link
Member

Regarding your last note in the issue, we don't connect to a wix server.

We do have a component with "wix" in its name, as you can see from #233 . This component is located at https://github.com/MohGovIL/rn-contact-tracing (also referenced by the packages.json file).

@rr9845
Copy link
Author

rr9845 commented Jul 29, 2020

@kaplanlior I had corrected my text, I only meant that as an example.

However listing the services that this application (and any internal componenet) is connecting to (even as simple as azure and firebase ) is crucial for the transperncy of this application.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants