L
L
Lici2013-10-07 18:54:28
iPhone
Lici, 2013-10-07 18:54:28

Security of the application "Accounting for income / expenses"

Hello.

I was looking for such a convenient thing on my phone as accounting for income / expenses, it would be interesting to monitor myself in order to understand where and how much money ends up going. However, I would not want the data I indicated to “merge” somewhere to the side.

I rummaged through the entire AppStore and found two applications that are convenient to use:

Wally - for tracking expenses. There are some minor downsides.
TapToTrack - for tracking expenses and income. In general, everyone likes it, except for the ability to remove income accounting from the screen.

I wonder if anyone checked whether the application data is leaking information somewhere? Are there any connections to obscure servers and an exchange of something suspicious? Surely there are curious people with sufficient training who checked this for their own interest.

I am also interested in whether it is possible to somehow block Internet access for certain applications on the iPhone or monitor outgoing and incoming traffic. There is no jailbreak.

Answer the question

In order to leave comments, you need to log in

4 answer(s)
T
TipTop, 2013-10-07
@TipTop

Disable cellular data for these applications and put a sniffer on a Wi-Fi hotspot.

N
Nikolai Turnaviotov, 2013-10-08
@foxmuldercp

Can I ask?
Suppose you have the opportunity to read from the database of your income/expense project where your users spend their money.
What can you do next with this information?
Well, you can, for example, collect statistics on the “average temperature in the hospital” that x% spend a thousand rubles a month on alcohol, and % have a mistress who spends another 10 thousand.
Let's move on:
There is Zhenya Vasechkin, who wants to count his expenses and incomes in your awesome project.
He registers an account for Vasya Pupkin on a one-time email and pays for the services of your project with bitcoins / webmoney.
Well, you have these data. What did they give you in terms of deanonymization?
Okay, again, let's move on.
There is, let’s say I, who have nothing to hide, registered on your project under my real name under email, a light google on which my profile is located in some linkedin thread with the above name, I pay a VIP package with a credit card with a mobile client, web and desktop program - a client, I have categories car, mistress, yacht and restaurants with an average entry amount, for example, 1000 bucks.
You have a hundred thousand customers who use your cool service at least a couple of times a day by entering payments into it.
Attention, the question is: What will you do with this data, except for regular project database backups?
In fact, the question is not idle - I am now writing my similar solution for managing financial flows.
So far, I have not come up with anything other than collecting statistics.

C
couatl, 2013-10-07
@couatl

No way.
It is possible to install the iphone emulator and monitor where the packets from the emulator go. But with Devices without jailbreak - no way.
Yes: Settings-Cellular-Cellular data for software - but WIFI will not work

A
Alexander, 2013-11-13
@alexyat

use my app, I don’t dump data anywhere, there is only Flurry with standard metrics, such as how many sessions there were and their duration. And the data itself does not go anywhere, even in iCloud. I plan to do synchronization, but I will still need to turn it on with handles, so that the data will be safe.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question