Avrete sicuramente sentito parlare della popolare applicazione FaceApp che vi mostra come sarete tra 50 anni o giù di lì, e che è diventata molto popolare in tutto il mondo negli scorsi giorni. FaceApp è stata sviluppata da un’azienda russa, quindi si è sviluppata un’accesa discussione su cosa fa e cosa non fa.
Check Point Software Technologies, il principale fornitore di soluzioni di cybersecurity a livello globale, ha quindi chiesto ai propri ricercatori esperti in mobile di analizzare l’applicazione e di seguito trovate le loro considerazioni sulla sicurezza dell’app.
Here are our findings regarding FaceApp:
- Permissions:
- The app uses very few permissions, and only the permissions needed for the app to operate.
- Internet and network state – to connect to FaceApp’s servers and upload data.
- Camera – to take pictures and videos.
- Read and Write to external storage – for uploading and downloading images to and from the device.
- Billing – for in-app purchases (other filters I guess).
- Wake lock – part of the FireBase service.
- And other gservices permissions
- Data access:
- As mentioned above, the app can access the gallery and external storage.
- There is an ability to load a .dex file from the internet, but they use if for Google-related services (permission g.)
- Build info of the device is sent to the internet – a part of the FireBase service.
- Android OS version, and stuff like that.
- Image Processing:
- We can say that the entire of the image processing process is done on FaceApp cloud servers.
- The data is sent to their servers, over HTTPS, to be processed.
In conclusion, we have found nothing out of the ordinary in this app.
I must say, that this app seems to be developed in a good-fashion – no greedy permissions, and it does what they claim it does.
They even state in their privacy section, that they upload the data to their servers – https://faceapp.com/privacy
