-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
0 parents
commit 38f8a21
Showing
37 changed files
with
6,297 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| <?xml version="1.0"?> | ||
| <users> | ||
| <user>98F49DE97B64901D5C7E30C51B8985D6</user> | ||
| </users> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,73 @@ | ||
| # TinyWeatherForecastGermanyScan | ||
|
|
||
| [](https://github.com/twfgcicdbot/TinyWeatherForecastGermanyScan/actions/workflows/exodusscan.yml) [](https://twfgcicdbot.github.io/TinyWeatherForecastGermanyScan/index.html) [](https://f-droid.org/packages/de.kaffeemitkoffein.tinyweatherforecastgermany) [](https://github.com/twfgcicdbot/TinyWeatherForecastGermanyMirror/blob/master/COPYING) | ||
|
|
||
| tl;dr -> scan code of [**TinyWeatherForecastGermany**](https://codeberg.org/Starfish/TinyWeatherForecastGermany) (TWFG) for tracker signatures provided by [**ExodusPrivacy**](https://exodus-privacy.eu.org/en/) using the python module [exodus-core](https://github.com/Exodus-Privacy/exodus-core/) | ||
|
|
||
| [Tiny Weather Forecast Germany](https://tinyweatherforecastgermanygroup.gitlab.io/index/) is an android open source weather app focused on Germany developped by Pawel Dube ([@Starfish](https://codeberg.org/Starfish)) using [open data](https://opendata.dwd.de/) provided by Deutscher Wetterdienst (DWD). | ||
|
|
||
| The DWD is Germany's **national weather agency** (similiar to **N**ational **O**ceanic **a**nd **A**tmospheric **A**dministration ([NOAA](https://www.noaa.gov/about-our-agency)) in the US). | ||
|
|
||
| **Note**: | ||
|
|
||
| * *'TWFG'* is an inofficial abbreviation for ***T**iny **W**eather **F**orecast **G**ermany.* | ||
| * *[ExodusPrivacy](https://github.com/Exodus-Privacy)* also partially uses the alternative spelling *'εxodus'*. To maintain readability the author sticks to the first version without the leading greek character. | ||
|
|
||
| ## Purpose -> *Why?* | ||
|
|
||
| *The non-profit running ExodusPrivacy provides [reports](https://reports.exodus-privacy.eu.org/de/reports/de.kaffeemitkoffein.tinyweatherforecastgermany/latest/) itself so ... why wasting resources when generating them on your own?* | ||
|
|
||
| At the time of writing (Mid-August 2021) ExodusPrivacy [only allows](https://reports.exodus-privacy.eu.org/de/analysis/submit/) the submission of apps retrieved directly either from Google Play Store or the open source F-Droid app store. But uploading apk files is not possible afaik. Waiting for the update approval process after releasing apps needs patience as (to my personal understanding) it needs interactions of human beings. So that's why I (*Jean-Luc Tibaux* -> [*@eUgEntOptIc44*](https://codeberg.org/eUgEntOptIc44)) setup [my own](https://twfgcicdbot.github.io/TinyWeatherForecastGermanyScan/) solution to scan the apk release artifacts of TWFG. | ||
|
|
||
| To scan apk files on your android mobile on your own please see either the [official ExodusPrivacy app](https://www.f-droid.org/en/packages/org.eu.exodus_privacy.exodusprivacy/) or [ClassyShark3xodus](https://bitbucket.org/oF2pks/fdroid-classyshark3xodus/src/master/ClassySharkAndroid/). The latter works 100% offline. | ||
|
|
||
| You'll find the 'official' reports generated by ExodusPrivacy themselves [here](https://reports.exodus-privacy.eu.org/de/reports/de.kaffeemitkoffein.tinyweatherforecastgermany/latest/). | ||
|
|
||
| ## Generated reports | ||
|
|
||
| data formats: | ||
|
|
||
| * **HTML** as a [GitHub Pages page](https://twfgcicdbot.github.io/TinyWeatherForecastGermanyScan/) -> see [`index.html`](https://twfgcicdbot.github.io/TinyWeatherForecastGermanyScan/index.html) | ||
|
|
||
| * **Markdown** see [`analysis-result.md`](https://twfgcicdbot.github.io/TinyWeatherForecastGermanyScan/analysis-result.md) | ||
|
|
||
| * **JSON** see [`analysis-result.json`](https://twfgcicdbot.github.io/TinyWeatherForecastGermanyScan/analysis-result.json) | ||
|
|
||
| ## Dependencies | ||
|
|
||
| * see [`requirements.txt`](https://raw.githubusercontent.com/twfgcicdbot/TinyWeatherForecastGermanyScan/main/requirements.txt) for Python dependencies | ||
| * `exodus-core` requires the package `dexdump` to be installed --> therefore it is strongly recommended to use a Linux OS for this project | ||
| * `ripgrepy` requires `ripgrep` to be installed | ||
|
|
||
| ### Installation of `dexdump` and `ripgrep` on ubuntu | ||
|
|
||
| ```bash | ||
| sudo apt install -y dexdump ripgrep | ||
| ``` | ||
|
|
||
| ## License and Copyright | ||
|
|
||
| This repository is licensed under **GPLv3** see [`LICENSE`](https://github.com/twfgcicdbot/TinyWeatherForecastGermanyScan/blob/bb7593cd5436a1be6495c068a3557ca4e4bf646f/LICENSE) for details. Please also see the legal terms noted inline in the code base. The author highly encourages everyone reading this to get in touch **before** using any of the contents of this repository for **commercial or by any means critical applications**. | ||
|
|
||
| **Copyright** of the *main* project -> **Tiny Weather Forecast Germany** -> Pawel Dube ([@Starfish](https://codeberg.org/Starfish)) | ||
|
|
||
| The file [`permissions_en.py`](https://raw.githubusercontent.com/twfgcicdbot/TinyWeatherForecastGermanyScan/main/permissions_en.py) [-> source](https://github.com/Exodus-Privacy/exodus/blob/c365dfd9f5044f48bc5ddac794073ed664b3a82a/exodus/exodus/core/permissions_en.py) is licensed under [GPLv3](https://github.com/Exodus-Privacy/exodus/blob/v1/LICENSE) under the copyright of the french non-profit [ExodusPrivacy](https://exodus-privacy.eu.org/en/). | ||
|
|
||
| The CI/CD script producing the reports displayed here is a ['GitHub action workflow'](https://github.com/twfgcicdbot/TinyWeatherForecastGermanyScan/actions/workflows/exodusscan.yml) created by Jean-Luc Tibaux (->[eUgEntOptIc44](https://gitlab.com/eUgEntOptIc44)). | ||
| Feel free to use it as a inspiration for your own projects. I'd be very grateful if this was helpful to you. Please let me know if so. | ||
|
|
||
| Please be aware that the code used here is by no means production-ready. Before using even parts of this in professional/commercial environments please double check against local laws and regulations that might apply. In general your mileage might **significantly** vary. Use only at your **own risk**. No guarantee of any kind provided. The author disclaims any damages. | ||
|
|
||
| The reports published through this repository are by no means intended to be used as evidence in a court of law or official investigation. Do not solely rely on these documents as a source of trust. | ||
|
|
||
| Please also see [this GitLab Pages page](https://tinyweatherforecastgermanygroup.gitlab.io/index/) containing references to all linked resources of [TinyWeatherForecastGermany](https://tinyweatherforecastgermanygroup.gitlab.io/index/). | ||
|
|
||
| This project is **not affialited** with any of the following organizations: ClassyShark3xodus, Codeberg, the DWD, ExodusPrivacy, Google, GitLab or GitHub or related individuals in any way. Named trademarks and brands belong to their owners. | ||
|
|
||
| ## Contributing | ||
|
|
||
| * All contributions to **Tiny Weather Forecast Germany** are managed at the ['main'](https://codeberg.org/Starfish/TinyWeatherForecastGermany) code repository at [codeberg.org](https://codeberg.org/Starfish/TinyWeatherForecastGermany) | ||
| * [**Translations**](https://translate.codeberg.org/engage/tiny-weather-forecast-germany/) are managed at the [**weblate** instance](https://translate.codeberg.org/projects/tiny-weather-forecast-germany/) provided by Codeberg e.V. | ||
| * Feel free to contribute to this script by opening issues and/or merge requests. | ||
| * Please also see the automatically generated *javadoc* **code documentation** of Tiny Weather Forecast Germany [at GitLab](https://gitlab.com/tinyweatherforecastgermanygroup/twfg-javadoc). | ||
| * For cybersec, privacy and/or copyright related issues regarding this repository please directly contact the maintainer [**Jean-Luc Tibaux** (@eUgEntOptIc44)](https://codeberg.org/eUgEntOptIc44) or our [CI/CD bot](https://github.com/twfgcicdbot). |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,108 @@ | ||
| { | ||
| "name": "Tiny Weather Forecast Germany", | ||
| "package": "de.kaffeemitkoffein.tinyweatherforecastgermany", | ||
| "hash_sha256": "2ad7faf3a7745e07c1437b0135f6512355751347d23cdeb95fc112449b2eb190", | ||
| "version": "0.62.5", | ||
| "version_code": "54", | ||
| "UID": "9516B3B40C249FEC74C079FEC8ED9036E97A7830", | ||
| "permissions": [ | ||
| { | ||
| "description": "Allows the app to read the sync settings for an account. For example, this can determine whether the People app is synced with an account.", | ||
| "description_ptr": "permdesc_readSyncSettings", | ||
| "label": "read sync settings", | ||
| "label_ptr": "permlab_readSyncSettings", | ||
| "name": "android.permission.READ_SYNC_SETTINGS", | ||
| "permission_group": "", | ||
| "protection_level": "normal" | ||
| }, | ||
| { | ||
| "description": "Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.", | ||
| "description_ptr": "permdesc_createNetworkSockets", | ||
| "label": "have full network access", | ||
| "label_ptr": "permlab_createNetworkSockets", | ||
| "name": "android.permission.INTERNET", | ||
| "permission_group": "", | ||
| "protection_level": "normal|instant" | ||
| }, | ||
| { | ||
| "description": "Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.", | ||
| "description_ptr": "permdesc_receiveBootCompleted", | ||
| "label": "run at startup", | ||
| "label_ptr": "permlab_receiveBootCompleted", | ||
| "name": "android.permission.RECEIVE_BOOT_COMPLETED", | ||
| "permission_group": "", | ||
| "protection_level": "normal" | ||
| }, | ||
| { | ||
| "description": "Allows an app to ask for permission to ignore battery optimizations for that app.", | ||
| "description_ptr": "permdesc_requestIgnoreBatteryOptimizations", | ||
| "label": "ask to ignore battery optimizations", | ||
| "label_ptr": "permlab_requestIgnoreBatteryOptimizations", | ||
| "name": "android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS", | ||
| "permission_group": "", | ||
| "protection_level": "normal" | ||
| }, | ||
| { | ||
| "description": "", | ||
| "description_ptr": "", | ||
| "label": "", | ||
| "label_ptr": "", | ||
| "name": "android.permission.AUTHENTICATE_ACCOUNTS", | ||
| "permission_group": "", | ||
| "protection_level": "normal" | ||
| }, | ||
| { | ||
| "description": "This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location.", | ||
| "description_ptr": "permdesc_accessCoarseLocation", | ||
| "label": "access approximate location only in the foreground", | ||
| "label_ptr": "permlab_accessCoarseLocation", | ||
| "name": "android.permission.ACCESS_COARSE_LOCATION", | ||
| "permission_group": "android.permission-group.LOCATION", | ||
| "protection_level": "dangerous|instant" | ||
| }, | ||
| { | ||
| "description": "This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.", | ||
| "description_ptr": "permdesc_accessFineLocation", | ||
| "label": "access precise location only in the foreground", | ||
| "label_ptr": "permlab_accessFineLocation", | ||
| "name": "android.permission.ACCESS_FINE_LOCATION", | ||
| "permission_group": "android.permission-group.LOCATION", | ||
| "protection_level": "dangerous|instant" | ||
| }, | ||
| { | ||
| "description": "Allows an app to modify the sync settings for an account. For example, this can be used to enable sync of the People app with an account.", | ||
| "description_ptr": "permdesc_writeSyncSettings", | ||
| "label": "toggle sync on and off", | ||
| "label_ptr": "permlab_writeSyncSettings", | ||
| "name": "android.permission.WRITE_SYNC_SETTINGS", | ||
| "permission_group": "", | ||
| "protection_level": "normal" | ||
| }, | ||
| { | ||
| "description": "Allows the app to view information about network connections such as which networks exist and are connected.", | ||
| "description_ptr": "permdesc_accessNetworkState", | ||
| "label": "view network connections", | ||
| "label_ptr": "permlab_accessNetworkState", | ||
| "name": "android.permission.ACCESS_NETWORK_STATE", | ||
| "permission_group": "", | ||
| "protection_level": "normal|instant" | ||
| }, | ||
| { | ||
| "description": "This app can access location at any time, even while the app is not in use.", | ||
| "description_ptr": "permdesc_accessBackgroundLocation", | ||
| "label": "access location in the background", | ||
| "label_ptr": "permlab_accessBackgroundLocation", | ||
| "name": "android.permission.ACCESS_BACKGROUND_LOCATION", | ||
| "permission_group": "android.permission-group.LOCATION", | ||
| "protection_level": "dangerous|instant" | ||
| }, | ||
| { | ||
| "name": "android.permission.POST_NOTIFICATIONS" | ||
| } | ||
| ], | ||
| "libraries": [], | ||
| "certificates": [ | ||
| "Issuer: Common Name: Pawel Dube, Organizational Unit: Unknown, Organization: Unknown, Locality: Hamburg, State/Province: Hamburg, Country: DE \n Subject: Common Name: Pawel Dube, Organizational Unit: Unknown, Organization: Unknown, Locality: Hamburg, State/Province: Hamburg, Country: DE \n Fingerprint: f7a5b59b8fbd6a6d287916881f2a5ab9343c5323 \n Serial: 263314478" | ||
| ], | ||
| "trackers": [] | ||
| } |
Oops, something went wrong.