Hi

I may be wrong, but can someone help me interpret the results of this analysis correctly?

https://www.hybrid-analysis.com/sample/0a0238f85b8a559e8ab54f67920004db3a67a39bdbdbfa00075fd7d27e41dec4/672423b56b46e4feb006681d

See the Network Related section: Why does Simplex.apk have a hardcoded communication with

issuetracker.google.com

android.googlesource.com

developers.google.com

An app that is advertised as the most privacy-friendly?

All other indicators can (probably) be considered false positives (for example, the Camera permission, which is needed for video calls)

  • Mettled@reddthat.com
    link
    fedilink
    English
    arrow-up
    2
    ·
    10 hours ago

    I can’t speak to that with a familiar level with the code, I can only presume or guess. All I will say is that is why I never install any app from Github or Gitlabs, because there is no third party verification of the code for releases on those sites.

    I only use F-Droid after disabling all anti-features in Settings and then install apps that I know are 100% clean from all dependancies.

    Download the SimpleX apk from F-Droid website and then run that to see what it says for any difference in the results.