iOS 的 App Store 上有超过 250 个 apps 会窃取用户个人信息，因为用了第三方的 SDK

[chadcjx]

原文链接： http://arstechnica.com/security/2015/10/researchers-find-256-ios-apps-that-collect-users-personal-info/

第三方 SDK 应该是 有米的广告 SDK 。 -> https://www.youmi.net

SourceDNA researchers found four major classes of information gathered by apps that use the Youmi ad SDK. They include:

A list of all apps installed on the phone

The platform serial number of iPhones or iPads themselves when they run older versions of iOS
A list of hardware components on devices running newer versions of iOS and the serial numbers of these components, and
The e-mail address associated with the user ’ s Apple ID

[egen]

如果是有米的 sdk ， app 数量应该远远超过 250 个

[holong2000]

防不胜防啊

[nashsu]

> SourceDNA researchers found four major classes of information gathered by apps that use the Youmi ad SDK. They include:

> 1. A list of all apps installed on the phone
> 2. The platform serial number of iPhones or iPads themselves when they run older versions of iOS
> 3. A list of hardware components on devices running newer versions of iOS and the serial numbers of these components, and
> 4. The e-mail address associated with the user ’ s Apple ID


如果是这些信息，那么似乎国内几乎每个 App 都会上传吧....

[taresky]

DOMAIN-SUFFIX,youmi.net,REJECT


果然我有这条，先见之明哈哈哈。

[actuallymax]

@taresky 求个完整的 reject 列表

[afterain]

@actuallymax https://gist.github.com/soffchen/47a44825626b1cbd0948

[GPU]

@afterain 还不能用 。 TF 满了。

[humiaozuzu]

@actuallymax https://gist.github.com/scomper/b0c6129840272c136a82 这个更好

[evanlyu]

@taresky 这是啥意思，求解释，要屏蔽某个地址？ 需要什么软件或设备啊

[laoyur]

> 4. The e-mail address associated with the user ’ s Apple ID
这条很感兴趣，不知道对应的 API 是哪个（当然是指动态调用方式）

[zander]

安全邮箱也有了， apple id 也有了，碰撞一下就能把设备锁上。 apple 还是强制所有人开两步验证吧。

[chadcjx]

@egen 不知道安卓平台上会有多么的肆无忌惮？

[justtoxic]

@humiaozuzu 你这没有规则有什么用，要的是那个 reject

[justtoxic]

@humiaozuzu 抱歉，没看全，点开链接才发现了

[taresky]

@humiaozuzu 好多啊，谢谢。

[g67261831]

@taresky Surge ？唉。。还没上架。。。