hummingbird , 9 months ago

The reported tracker is ACRA, a crash report library (github.com/ACRA/acra).

I digged a bit into the source code and the apk. From looking at the code alone one can’t tell if the crash report is actually enabled, the build configuration depends on some unpublished file. But looking into the apk allows to reconstruct it. These are my findings:

• the usage is implemented here: gitlab.futo.org/…/CrashLoggingApplication.kt
• the crash handler is compiled in and also enabled (BuildConfig.ENABLE_ACRA=true)
• the crash handler is configured to dialog mode. According to the ACRA documentation (www.acra.ch/docs/Interactions#dialog) that means that user interaction is required for sending (a popup dialog with a cancel button).
• the upload domain is crash.sapples.net
• the dialog can’t be disabled via settings
• the usage of ACRA is missing in the licenses and about dialogs (gitlab.futo.org/alex/…/license-list.html)
• the privacy policy is correctly stated (voiceinput.futo.org/VoiceInput/PrivacyPolicy) > 4.1. If the app crashes, you may be asked if you wish to submit a crash report. If you accept, your device information and crash details will be sent to us for the purposes of investigating the crash and improving the software.