Skip to content

flipper-noop gets detected as a tracker, altough its just a stub #102

@1muen

Description

@1muen

Hi, thanks for exodus, im not an android dev.
On the https://github.com/pretix/pretixscan-android app exodus detects the com.facebook.flipper tracker.
On https://fbflipper.com/docs/getting-started/android-native/ FB says:

It's recommended that you keep all Flipper instantiation code in a separate build variant to ensure it doesn't accidentally make it into your production builds.

As far as I can see pretix does this correctly: https://github.com/pretix/pretixscan-android/blob/master/pretixscan/app/build.gradle#L168
by using com.facebook.flipper:flipper-noop instead in builds other then debug.

As far as I can see, the noop implementation just provides mocks.
https://github.com/facebook/flipper/blob/main/android/no-op/src/main/java/com/facebook/flipper/android/NoOpAndroidFlipperClient.java

I decompiled the app on F-Droid and couldnt find a real flipper implementation:

Image

If its just a mock/"no-op" (no operation) implementation it shouldnt be detected as a privacy invasive tracker.
Here https://gitlab.com/fdroid/fdroiddata/-/issues/3443#note_2260177467 someone had a similar problem with other apps, where Green, Countly were just a stub but were reported as trackers.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions