The permissions we give to apps they usually grant various powers that sometimes we don't really know the consequence of them. Allowing an app to use phone calls implies that it also has access to important information such as IMEI. That is why we use logic a bit with applications when they ask us for various permissions, although having micropayments sometimes confuses us.
Meitu is a Chinese photo app that applies various filters and enhancements to the images we want. It is in the last hours when it has come to the fore when it is known that the application is sending a massive amount of user details to external IP addresses. Quite a surprise for an application that was having a lot of popularity and which is now recommended to be uninstalled.
As I said, when using an Android device, it is highly recommended to look at the permissions that are going to be given. We can refuse to do so and launch the app. The manifesto of the Meitu APK asks for twenty-three permissionsincluding full network access, the ability to change settings, exact location, MAC address, local IP, and more.
@Laughing_Mantis I had my doubts but guess what!
Destination
110.173.196.36
124.243.219.159
42.62.120.41
_IMEI pic.twitter.com/zV66cMm5AO- FourOctets (@FourOctets) January 19, 2017
It is the Twitter user @ rekrom12 who has found the MTAnalyticsAdLogEntity.java within the APK that contains the code for all those details that are sent about the device. That includes device model, resolution, Android version, MAC address, IMEI, and more.
These are all the permissions:
Another user, @FourOctets, intercepted the app's network activity, and has been bound to multiple Chinese IP addresses. So it is up to you to install this app that could include some future surprises, although for now it already sends data such as IMEI to IP addresses in another country.
what does this mean?