<string name="pages$scanner-page$intro">\\textbf{Scanner page} appears after clicking on the \\emph{scanner} button in the \\hyperref[subsec:app-info-tab]{App Info tab}.\nExternal APK files can also be opened for scanning from file managers, web browsers, etc.\n\nIt scans for trackers and libraries, and displays the number of trackers and libraries as a summary.\nIt also displays checksums of the APK file as well as the signing certificates. If VirusTotal is\nconfigured in the settings, it also attempts to retrieve reports from VirusTotal, or uploads the APK\nfile if it is not in the database. It also display a link to the \\href{https://beta.pithus.org}{Pithus}\nreport provided the Internet features are enabled.\n\n\\begin{danger}{Disclaimer}\n App Manager only scans an application statically without prejudice. The application may provide\n the options for opting out, or in some cases, certain features of the tracker may not be used at\n all by the application (e.g.\\ F-Droid), or some applications may simply use them as placeholders\n to prevent the breaking of certain features (e.g.\\ Fennec F-Droid). \\textbf{The intention of the\n scanner is to give you an idea about what the APK might contain. It should be taken as an\n initial step for further investigations.}\n\\end{danger}\n\nClicking on the first item (i.e.\\ number of classes) opens a new page containing a list of tracker\nclasses for the application. All classes can also be viewed by clicking on the \\textit{Toggle Class\nListing} menu. The SMALI or Java version of the class can be viewed by simply clicking on an item.\n\n\\begin{tip}{Notice}\n Due to various limitations, it is not possible to scan all the components of an APK file. This\n is especially true if an APK is highly obfuscated or packed. The scanner also does not check\n strings (or website signatures).\n\\end{tip}\n\nThe second item lists the number of trackers along with their names. Clicking on the item displays a\ndialog containing the name of trackers, matched signatures, and the number of classes against each\nsignature. Some tracker names may have $^2$ prefix which indicates that the trackers are in the\n\\href{https://etip.exodus-privacy.eu.org}{ETIP} stand-by list, i.e., whether they are actual\ntrackers is still being investigated.\n\nThe third item lists the number of libraries along with their names. The information are mostly\ntaken from \\href{https://gitlab.com/IzzyOnDroid/repo}{IzzyOnDroid repo}.\n\n\\seealsoinline{\\hyperref[subsec:tracker-classes-versus-tracker-components]{FAQ: Tracker classes vs tracker components}}</string>
0 commit comments