BeCandid/Code - Revision history

imported>Cobaltcat at 07:28, 7 March 2023

2023-03-07T07:28:52Z

← Older revision	Revision as of 07:28, 7 March 2023
(No difference)

imported>Cobaltcat at 07:28, 7 March 2023

2023-03-07T07:28:52Z

@@ Line 164: / Line 164: @@
 '''These code snippets were found in the file: “Logging.java” & “BuildConfig.Java”'''
 </div>
 {{Social Media}}

imported>JuniusThaddeus: Repairing collapsible.

2017-09-01T20:29:26Z

Repairing collapsible.

← Older revision		Revision as of 20:29, 1 September 2017
Line 151:		Line 151:

	==Obsolete info==		==Obsolete info==
	<span class="~~co;~~[-~~];[+];{{{4\|0}}};{{{~~obsolete~~}}}~~"></span><big>Warning: This is old news</big>		<span class="collapsibletoggle">[<span class="mw-customtoggle-obsolete showhidetext"><span class="collapsibletoggletext hiddentext">-</span><span class="collapsibletoggletext">+</span></span>]</span><big>Warning: This is old news</big>
	<div class="~~{{{obsolete}}}~~">		<div id="mw-customcollapsible-obsolete" class="mw-collapsible mw-collapsed">

	[[File:BeCandid Code 2.png\|center\|600px]]<br />		[[File:BeCandid Code 2.png\|center\|600px]]<br />

imported>Mantequilla: /* Candid Is Taking Your Facebook Info */

2016-11-05T17:45:20Z

Candid Is Taking Your Facebook Info

← Older revision		Revision as of 17:45, 5 November 2016
Line 31:		Line 31:
	[[File:BeCandid Code 35.png\|thumb]]		[[File:BeCandid Code 35.png\|thumb]]
	This code snippet is to show you that they’re actually using the ids to cataloging the info, the code for school IDs and friend IDs are almost the same. What’s happening in this code is get an array or a list from Facebook of all your employers they then type this into a log file with the text		This code snippet is to show you that they’re actually using the ids to cataloging the info, the code for school IDs and friend IDs are almost the same. What’s happening in this code is get an array or a list from Facebook of all your employers they then type this into a log file with the text
	'''FBINFO''', '''Jobs ids:''' and here comes the best bit “the id of the place where you actually work” or have worked, longer down in the document you will see why this is scary. A scenario this can be used in if you like Bindu Reddy like to justify the holocaust on twitter or declare a person a deity. Candid can link this to your post history then they can go your employer and say “Hey, CIA your employee Hugh Mungus has been saying unpolitically correct things on the internet, plz baus fire him”		'''FBINFO''', '''Jobs ids:''' and here comes the best bit “the id of the place where you actually work” or have worked, longer down in the document you will see why this is scary. A scenario this can be used in if you like Bindu Reddy like to justify the holocaust on twitter or declare a person a deity. Candid can link this to your post history then they can go your employer and say “Hey, CIA your employee [[Hugh Mungus]] has been saying unpolitically correct things on the internet, plz baus fire him”
	Here you can see candid doing exactly the same thing as they did with the places you’ve worked but only with your messages instead. Now what’s strange is why would candid need this information. Bindu Laden has claimed they don’t do any datamining, now why the fuck would they even use this information. They’re obviously using it for something.		Here you can see candid doing exactly the same thing as they did with the places you’ve worked but only with your messages instead. Now what’s strange is why would candid need this information. Bindu Laden has claimed they don’t do any datamining, now why the fuck would they even use this information. They’re obviously using it for something.
	{{clear}}		{{clear}}

imported>Mantequilla: /* How They Datamine You On Facebook */

2016-11-05T17:04:51Z

How They Datamine You On Facebook

← Older revision		Revision as of 17:04, 5 November 2016
Line 27:		Line 27:
	</center>		</center>
	<br />		<br />
	There is a file called facebookinfo.java and this is the first thing they’re doing in that file. They create publics first so they can access this information from anywhere in the app as you see in the picture above they have already done this at least once. After they’ve gotten your precise age they get their Facebook access key out and ~~gets~~ the Facebook ID for all of your Facebook friends, all employers you’ve registered with on Facebook, and all the schools you’ve gone too. This is seriously fucked up for an application that claims to be focused on privacy and anonymity.		There is a file called facebookinfo.java and this is the first thing they’re doing in that file. They create publics first so they can access this information from anywhere in the app as you see in the picture above they have already done this at least once. After they’ve gotten your precise age they get their Facebook access key out and scrape the Facebook IDs for all of your Facebook friends, all employers you’ve registered with on Facebook, and all the schools you’ve gone too. ''This is seriously fucked up for an application that claims to be focused on privacy and anonymity''.
	[[File:BeCandid Code 34.png\|center\|600px]]<br />		[[File:BeCandid Code 34.png\|center\|600px]]<br />
	[[File:BeCandid Code 35.png\|thumb]]		[[File:BeCandid Code 35.png\|thumb]]

imported>Mantequilla: /* How They Datamine You On Facebook */

2016-11-05T17:03:24Z

How They Datamine You On Facebook

← Older revision		Revision as of 17:03, 5 November 2016
Line 27:		Line 27:
	</center>		</center>
	<br />		<br />
	There is a file called facebookinfo.java and this is the first thing they’re doing in that file. They create publics first so they can access this information from anywhere in the app as you see in the picture above they have already done this at least once. After they’ve gotten your precise age they ~~make~~ get their Facebook access key out and gets the Facebook ID for all of your Facebook friends, all employers you’ve registered with on Facebook, and all the schools you’ve gone too. This is seriously fucked up for an application that claims to be focused on privacy and anonymity.		There is a file called facebookinfo.java and this is the first thing they’re doing in that file. They create publics first so they can access this information from anywhere in the app as you see in the picture above they have already done this at least once. After they’ve gotten your precise age they get their Facebook access key out and gets the Facebook ID for all of your Facebook friends, all employers you’ve registered with on Facebook, and all the schools you’ve gone too. This is seriously fucked up for an application that claims to be focused on privacy and anonymity.
	[[File:BeCandid Code 34.png\|center\|600px]]<br />		[[File:BeCandid Code 34.png\|center\|600px]]<br />
	[[File:BeCandid Code 35.png\|thumb]]		[[File:BeCandid Code 35.png\|thumb]]

imported>Cobaltcat at 16:04, 16 October 2016

2016-10-16T16:04:26Z

← Older revision		Revision as of 16:04, 16 October 2016
Line 1:		Line 1:
	{{Subpage\|BeCandid}}		{{Subpage\|BeCandid}}
			{{:BeCandid/nav}}
	This was done by downloading an official [https://apkpure.com/candid/com.becandid.candid APK], then decompiling it by using Eclipse, Dex2jar and jd-gui all freeware tools so from a legal aspect there are no issues. They didn’t even secure the APK. Although Kochava had encrypted some files as to how they store user information on the database candid is running. This does not impact the results of the finding. Most of decompiling was done by {{twitter\|itgoybe}} so all complaints should be sent to him.		This was done by downloading an official [https://apkpure.com/candid/com.becandid.candid APK], then decompiling it by using Eclipse, Dex2jar and jd-gui all freeware tools so from a legal aspect there are no issues. They didn’t even secure the APK. Although Kochava had encrypted some files as to how they store user information on the database candid is running. This does not impact the results of the finding. Most of decompiling was done by {{twitter\|itgoybe}} so all complaints should be sent to him.

imported>Cobaltcat: /* How They Datamine You On Facebook */

2016-10-14T19:31:07Z

How They Datamine You On Facebook

← Older revision		Revision as of 19:31, 14 October 2016
Line 16:		Line 16:
	===How They Datamine You On Facebook===		===How They Datamine You On Facebook===
	[[File:BeCandid Code 30.png\|center\|600px]]<br />		[[File:BeCandid Code 30.png\|center\|600px]]<br />
	n this code, candid is connecting to your Facebook and still gets your first name, middle name, last name, your friends, your work history, your education history and probably which one of your exes you stalk. To top it all off to access the desktop version because let’s be honest you don’t want to use the plebian cellphone when you can use the glorious pc mustard rice. You have to give them your Facebook or phone number to be able to use the web version. This is their trap to get you to give them your info because as Bindu claimed they don’t know how to log out of a session, this can be found out how too with a 30 second google search.		In this code, candid is connecting to your Facebook and still gets your first name, middle name, last name, your friends, your work history, your education history and probably which one of your exes you stalk. To top it all off to access the desktop version because let’s be honest you don’t want to use the plebian cellphone when you can use the glorious pc mustard rice. You have to give them your Facebook or phone number to be able to use the web version. This is their trap to get you to give them your info because as Bindu claimed they don’t know how to log out of a session, this can be found out how too with a 30 second google search.
	[[File:BeCandid Code 31.png\|center\|600px\|The CEO of a privacy app, errybody]]		[[File:BeCandid Code 31.png\|center\|600px\|The CEO of a privacy app, errybody]]
	Now while were talking about Facebook this is another really interesting code snippet. What this looks like is that candid is using your Facebook connection to get a list of all your friends and do some sort of matching. <br />		Now while were talking about Facebook this is another really interesting code snippet. What this looks like is that candid is using your Facebook connection to get a list of all your friends and do some sort of matching. <br />

imported>LulzKiller: /* Obsolete info */

2016-10-14T12:41:38Z

Obsolete info

← Older revision		Revision as of 12:41, 14 October 2016
Line 163:		Line 163:
	'''These code snippets were found in the file: “Logging.java” & “BuildConfig.Java”'''		'''These code snippets were found in the file: “Logging.java” & “BuildConfig.Java”'''
	</div>		</div>

			{{Social Media}}

imported>Cobaltcat: Colored in now. Done.

2016-10-14T12:36:22Z

Colored in now. Done.

← Older revision		Revision as of 12:36, 14 October 2016
Line 1:		Line 1:
	~~{{breakingnews\|'''Their newest release has removed almost all references to Kochava. Expect them to find a new way to data mine you'''}}~~
	{{Subpage\|BeCandid}}		{{Subpage\|BeCandid}}
	This was done by downloading an official [https://apkpure.com/candid/com.becandid.candid APK], then decompiling it by using Eclipse, Dex2jar and jd-gui all freeware tools so from a legal aspect there are no issues. They didn’t even secure the APK. Although Kochava had encrypted some files as to how they store user information on the database candid is running. This does not impact the results of the finding. Most of decompiling was done by {{twitter\|itgoybe}} so all complaints should be sent to him.		This was done by downloading an official [https://apkpure.com/candid/com.becandid.candid APK], then decompiling it by using Eclipse, Dex2jar and jd-gui all freeware tools so from a legal aspect there are no issues. They didn’t even secure the APK. Although Kochava had encrypted some files as to how they store user information on the database candid is running. This does not impact the results of the finding. Most of decompiling was done by {{twitter\|itgoybe}} so all complaints should be sent to him.
Line 19:		Line 18:
	n this code, candid is connecting to your Facebook and still gets your first name, middle name, last name, your friends, your work history, your education history and probably which one of your exes you stalk. To top it all off to access the desktop version because let’s be honest you don’t want to use the plebian cellphone when you can use the glorious pc mustard rice. You have to give them your Facebook or phone number to be able to use the web version. This is their trap to get you to give them your info because as Bindu claimed they don’t know how to log out of a session, this can be found out how too with a 30 second google search.		n this code, candid is connecting to your Facebook and still gets your first name, middle name, last name, your friends, your work history, your education history and probably which one of your exes you stalk. To top it all off to access the desktop version because let’s be honest you don’t want to use the plebian cellphone when you can use the glorious pc mustard rice. You have to give them your Facebook or phone number to be able to use the web version. This is their trap to get you to give them your info because as Bindu claimed they don’t know how to log out of a session, this can be found out how too with a 30 second google search.
	[[File:BeCandid Code 31.png\|center\|600px\|The CEO of a privacy app, errybody]]		[[File:BeCandid Code 31.png\|center\|600px\|The CEO of a privacy app, errybody]]
	Now while were talking about Facebook this is another really interesting code snippet. What this looks like is that candid is using your Facebook connection to get a list of all your friends and do some sort of matching.		Now while were talking about Facebook this is another really interesting code snippet. What this looks like is that candid is using your Facebook connection to get a list of all your friends and do some sort of matching. <br />
	<center>		<center>
	{{Photoframe\|Datamining on Facebook\|border: 2px solid #~~FE0000~~; padding: 5px;\|font-weight: bold;		{{Photoframe\|Datamining on Facebook\|border: 2px solid #000; padding: 5px; background-color: #e9e315;\|font-weight: bold;
	\|[[File:BeCandid Code 32.png\|File:BeCandid Code 32.png\|\|600px]]{{center\|'''Load Friends.'''}}		\|[[File:BeCandid Code 32.png\|File:BeCandid Code 32.png\|\|600px]]{{center\|'''Load Friends.'''}}
	\|[[File:BeCandid Code 33.png\|File:BeCandid Code 33.png\|\|600px]]{{center\|'''FacebookInfo.java'''}}		\|[[File:BeCandid Code 33.png\|File:BeCandid Code 33.png\|\|600px]]{{center\|'''FacebookInfo.java'''}}
	}}		}}
	</center>		</center>
			<br />
	There is a file called facebookinfo.java and this is the first thing they’re doing in that file. They create publics first so they can access this information from anywhere in the app as you see in the picture above they have already done this at least once. After they’ve gotten your precise age they make get their Facebook access key out and gets the Facebook ID for all of your Facebook friends, all employers you’ve registered with on Facebook, and all the schools you’ve gone too. This is seriously fucked up for an application that claims to be focused on privacy and anonymity.		There is a file called facebookinfo.java and this is the first thing they’re doing in that file. They create publics first so they can access this information from anywhere in the app as you see in the picture above they have already done this at least once. After they’ve gotten your precise age they make get their Facebook access key out and gets the Facebook ID for all of your Facebook friends, all employers you’ve registered with on Facebook, and all the schools you’ve gone too. This is seriously fucked up for an application that claims to be focused on privacy and anonymity.
	[[File:BeCandid Code 34.png\|center\|600px]]<br />		[[File:BeCandid Code 34.png\|center\|600px]]<br />
Line 48:		Line 48:
	Now here comes the fun part, Candid is making a list and checking it twice of which apps are naughty and nice:		Now here comes the fun part, Candid is making a list and checking it twice of which apps are naughty and nice:
	<center>		<center>
	{{Photoframe\|Datamining\|border: 2px solid #~~FE0000~~; padding: 5px;\|font-weight: bold;		{{Photoframe\|Datamining\|border: 2px solid #000; padding: 5px; background-color: #e9e315;\|font-weight: bold;
	\|[[File:BeCandid Code 8.png\|File:BeCandid Code 8.png\|\|600px]]{{center\|'''Installed Apps'''}}		\|[[File:BeCandid Code 8.png\|File:BeCandid Code 8.png\|\|600px]]{{center\|'''Installed Apps'''}}
	\|[[File:BeCandid Code 9.png\|File:BeCandid Code 9.png\|\|600px]]{{center\|'''Installed Apps'''}}		\|[[File:BeCandid Code 9.png\|File:BeCandid Code 9.png\|\|600px]]{{center\|'''Installed Apps'''}}
Line 63:		Line 63:
	==Candid And Advertisement==		==Candid And Advertisement==
	This is something that is baffling, for an app that claim they don’t do advertisement they have fucking lots of advertisement code, wherether this is future proofing or copypaste from mylikes can't be confirmed.		This is something that is baffling, for an app that claim they don’t do advertisement they have fucking lots of advertisement code, wherether this is future proofing or copypaste from mylikes can't be confirmed.
	{{center\|{{Textframe\|ads\|border: 2px solid ~~gray~~; padding: 5px; width: 40%; background-color: #~~FFFFFF~~;\|font-weight: bold;		{{center\|{{Textframe\|ads\|border: 2px solid #000; padding: 5px; width: 40%; background-color: #e9e315;\|font-weight: bold;
	\|{{center\|<big>'''{{colortext\|~~orange~~\|Google Play Store Adtracking}}'''</big>}}<br />In this image you can clearly see candid connecting to google and get your personalized Advertising ID I would assume this is already given to them via google play store, which a lot of people use under their personal name, this is handed off to kochava in the mess that is the candid sourcecode, now why they would need this since theyre “ad-free”, we have no idea. <br /><br />[[File:BeCandid Code 11.png\|center\|600px]]		\|{{center\|<big>'''{{colortext\|#00bbf9\|Google Play Store Adtracking}}'''</big>}}<br />In this image you can clearly see candid connecting to google and get your personalized Advertising ID I would assume this is already given to them via google play store, which a lot of people use under their personal name, this is handed off to kochava in the mess that is the candid sourcecode, now why they would need this since theyre “ad-free”, we have no idea. <br /><br />[[File:BeCandid Code 11.png\|center\|600px]]
	\|{{center\|<big>'''{{colortext\|~~orange~~\|Twitterads}}'''</big>}}<br />Here you have clear proof that candid uses kochava for advertising purposes this is further de-anonymizing when they can link you to twitter ads, say for example you want to get fisted up the ass by a robot dildo and then on your personal twitter 24 hours later you suddenly see ads for robots or dildos, this is the scenario this can be used in.<br /><br />[[File:BeCandid Code 12.png\|center\|600px]]		\|{{center\|<big>'''{{colortext\|#00bbf9\|Twitterads}}'''</big>}}<br />Here you have clear proof that candid uses kochava for advertising purposes this is further de-anonymizing when they can link you to twitter ads, say for example you want to get fisted up the ass by a robot dildo and then on your personal twitter 24 hours later you suddenly see ads for robots or dildos, this is the scenario this can be used in.<br /><br />[[File:BeCandid Code 12.png\|center\|600px]]
	\|{{center\|<big>'''{{colortext\|~~orange~~\|Ads folder}}'''</big>}}<br />They even have folders named ads. How much clearer can it possibly get? <br /><br />		\|{{center\|<big>'''{{colortext\|#00bbf9\|Ads folder}}'''</big>}}<br />They even have folders named ads. How much clearer can it possibly get? <br /><br />
	[[File:BeCandid Code 13.png\|center]]		[[File:BeCandid Code 13.png\|center]]
	\|{{center\|<big>'''{{colortext\|~~orange~~\|Upsell}}'''</big>}}<br />{{quote\|Upselling is a sales technique whereby a seller induces the customer to purchase more expensive items, upgrades or other add-ons in an attempt to make a more profitable sale. While it usually involves marketing more profitable services or products, it can be simply exposing the customer to other options that were perhaps not considered. (A different technique is cross-selling in which a seller tries to sell something else.) In practice, large businesses usually combine upselling and cross-selling to maximize profit. In doing so, an organization must ensure that its relationship with the client is not disrupted.}}<br /><br />[[File:BeCandid Code 15.png\|center]]<br />		\|{{center\|<big>'''{{colortext\|#00bbf9\|Upsell}}'''</big>}}<br />{{quote\|Upselling is a sales technique whereby a seller induces the customer to purchase more expensive items, upgrades or other add-ons in an attempt to make a more profitable sale. While it usually involves marketing more profitable services or products, it can be simply exposing the customer to other options that were perhaps not considered. (A different technique is cross-selling in which a seller tries to sell something else.) In practice, large businesses usually combine upselling and cross-selling to maximize profit. In doing so, an organization must ensure that its relationship with the client is not disrupted.}}<br /><br />[[File:BeCandid Code 15.png\|center]]<br />
	Upsell has been used 150 in the becandid source code which for an app that doesn't have advertising is really strange.		Upsell has been used 150 in the becandid source code which for an app that doesn't have advertising is really strange.
	\|{{center\|<big>'''{{colortext\|~~orange~~\|Upsell usage}}'''</big>}}<br />[[File:BeCandid Code 16.png\|center\|600px]]		\|{{center\|<big>'''{{colortext\|#00bbf9\|Upsell usage}}'''</big>}}<br />[[File:BeCandid Code 16.png\|center\|600px]]
	\|{{center\|<big>'''{{colortext\|~~orange~~\|Upsell example}}'''</big>}}<br />Here you have a nice big code of an upsell example in Candid. What I think this code does it gets your phonenumber from candid or facebook and firstly archives this it's already been proved above that Candid and Kochava already knows what kind of phone and OS you are running.<br /><br />[[File:BeCandid Code 17.png\|center\|600px]]		\|{{center\|<big>'''{{colortext\|#00bbf9\|Upsell example}}'''</big>}}<br />Here you have a nice big code of an upsell example in Candid. What I think this code does it gets your phonenumber from candid or facebook and firstly archives this it's already been proved above that Candid and Kochava already knows what kind of phone and OS you are running.<br /><br />[[File:BeCandid Code 17.png\|center\|600px]]
	}}}}		}}}}

Line 121:		Line 121:
	With this huge update comes a lot of new files. They’ve expanded on their Facebook datamining operation, added new libraries for tracking your location, added a new library that can get your country ID from your sim, now this isn’t bad in itself because candid already knows so much about you. This would be handy when they decide to sell the information, they have stored over to their advertisers.<br />		With this huge update comes a lot of new files. They’ve expanded on their Facebook datamining operation, added new libraries for tracking your location, added a new library that can get your country ID from your sim, now this isn’t bad in itself because candid already knows so much about you. This would be handy when they decide to sell the information, they have stored over to their advertisers.<br />
	<center>		<center>
	{{Photoframe\|Sim Card Data\|border: 2px solid #~~FE0000~~; padding: 5px;\|font-weight: bold;		{{Photoframe\|Sim Card Data\|border: 2px solid #000; padding: 5px; background-color: #e9e315;\|font-weight: bold;
	\|[[File:BeCandid Code 27.png\|File:BeCandid Code 27.png\|\|500px]]{{center\|''''''}}		\|[[File:BeCandid Code 27.png\|File:BeCandid Code 27.png\|\|500px]]{{center\|''''''}}
	\|[[File:BeCandid Code 28.png\|File:BeCandid Code 28.png\|\|500px]]{{center\|'''The author of this library’s own words'''}}		\|[[File:BeCandid Code 28.png\|File:BeCandid Code 28.png\|\|500px]]{{center\|'''The author of this library’s own words'''}}