Firebase support bounty
This is a bounty to promote development interest and find a solution to the many apps that fail because of the migration from GCM (Google Cloud Messaging) to FCM (Firebase Cloud Messaging)
https://www.bountysource.com/issues/51518216-gcm-fcm-update-needed-for-push-messaging
Follow the conversation in the latest pages of MicroG XDA thread and on GitHub:
https://forum.xda-developers.com/android/apps-games/app-microg-gmscore-floss-play-services-t3217616
https://github.com/microg
The Deprecation of GCM for FCM
by @ Shadow53
https://shadow53.com/post/whats-new-pussycat/#the-deprecation-of-gcm-for-fcm
"Users of MicroG on Android Oreo will notice that their apps using Google for notifications are no longer receiving them. This is because of Google pushing Firebase Cloud Messaging (FCM) as a replacement for Google Cloud Messaging (GCM) for notifications. MicroG currently only has support for the older GCM protocol, so apps using the newer FCM cannot register for notifications.
Some people have found that installing older versions of the app will cause it to register via GCM, then an update will continue using GCM. The problem of lacking support for FCM still remains.
A solution to this problem is to just not use apps that require Play Services at all, and request that developers of apps you use requiring Play Services implement an alternate method of pushing notifications.
This doesn’t work if you need a certain app that still requires Play Services, and certainly won’t work if trying to convince someone to switch to using MicroG. So, we need to get FCM implemented. Open Source enthusiasts will suggest that I do it if I think it needs to be done - I would, and I may in the future, but not any time soon. I have too many projects already that need to be worked on. So here’s hoping someone else is able to get something working…"
#bounty #firebase #fcm
This is a bounty to promote development interest and find a solution to the many apps that fail because of the migration from GCM (Google Cloud Messaging) to FCM (Firebase Cloud Messaging)
https://www.bountysource.com/issues/51518216-gcm-fcm-update-needed-for-push-messaging
Follow the conversation in the latest pages of MicroG XDA thread and on GitHub:
https://forum.xda-developers.com/android/apps-games/app-microg-gmscore-floss-play-services-t3217616
https://github.com/microg
The Deprecation of GCM for FCM
by @ Shadow53
https://shadow53.com/post/whats-new-pussycat/#the-deprecation-of-gcm-for-fcm
"Users of MicroG on Android Oreo will notice that their apps using Google for notifications are no longer receiving them. This is because of Google pushing Firebase Cloud Messaging (FCM) as a replacement for Google Cloud Messaging (GCM) for notifications. MicroG currently only has support for the older GCM protocol, so apps using the newer FCM cannot register for notifications.
Some people have found that installing older versions of the app will cause it to register via GCM, then an update will continue using GCM. The problem of lacking support for FCM still remains.
A solution to this problem is to just not use apps that require Play Services at all, and request that developers of apps you use requiring Play Services implement an alternate method of pushing notifications.
This doesn’t work if you need a certain app that still requires Play Services, and certainly won’t work if trying to convince someone to switch to using MicroG. So, we need to get FCM implemented. Open Source enthusiasts will suggest that I do it if I think it needs to be done - I would, and I may in the future, but not any time soon. I have too many projects already that need to be worked on. So here’s hoping someone else is able to get something working…"
#bounty #firebase #fcm
Bountysource
A $623 Bounty has been paid out for microg/GmsCore
GCM -> FCM Update needed for push messaging [$623 PAID] [$623 awarded]
https://www.bountysource.com/issues/51518216-gcm-fcm-update-needed-for-push-messaging
chris42:
Just to help a few people trying to figure out if push messaging is working or not, please check the following:
✅ you are using newest microg version 0.2.5-12879 running (ale5000 installer is updated and should be very helpful)
✅ you deactivated battery optimization for microg
✅ you activated google device registration
✅ you get all the green checkmarks in microg diagnostics
✅ you made sure nothing is blocking network traffic to mtalk.google.com (e.g. afwall, adaway, ...)
✅ you deleted the app you have troubles with and installed it fresh after updating to microg 0.2.5-12879
✅ you have not used backup solutions, like oandbackup, titaniumbackup, ... to restore app data
✅ you can also use the push notification tester to check. I just tried it and it works.
To verify incoming messages, look in you logs and search for "GmsGcmMcsInput". You should see the heartbeat and Incoming messages. In the incoming messages there should be a category stating your apps package. This should be messages your receive via push. (@mar-v-in I hope this is correct?!)
#firebase #fcm #bounty
chris42:
Just to help a few people trying to figure out if push messaging is working or not, please check the following:
✅ you are using newest microg version 0.2.5-12879 running (ale5000 installer is updated and should be very helpful)
✅ you deactivated battery optimization for microg
✅ you activated google device registration
✅ you get all the green checkmarks in microg diagnostics
✅ you made sure nothing is blocking network traffic to mtalk.google.com (e.g. afwall, adaway, ...)
✅ you deleted the app you have troubles with and installed it fresh after updating to microg 0.2.5-12879
✅ you have not used backup solutions, like oandbackup, titaniumbackup, ... to restore app data
✅ you can also use the push notification tester to check. I just tried it and it works.
To verify incoming messages, look in you logs and search for "GmsGcmMcsInput". You should see the heartbeat and Incoming messages. In the incoming messages there should be a category stating your apps package. This should be messages your receive via push. (@mar-v-in I hope this is correct?!)
#firebase #fcm #bounty
Bountysource
A $623 Bounty has been paid out for microg/GmsCore
GCM -> FCM Update needed for push messaging [$623 PAID] [$623 awarded]
How Tutanota replaced Google’s FCM with their own notification system
https://f-droid.org/en/2018/09/03/replacing-gcm-in-tutanota.html
#tutanota #email #fcm #firebase
https://f-droid.org/en/2018/09/03/replacing-gcm-in-tutanota.html
#tutanota #email #fcm #firebase
f-droid.org
How Tutanota replaced Google’s FCM with their own notification system | F-Droid - Free and Open Source Android App Repository
As mentioned in This Week In F-Droid 17,Tutanota is now on F-Droid.In this special post Ivanfrom Tutanota, tells us the story.Hi, I’m Ivan and I am developin...
Disable Fuck Services script 1.2
The goal of this program is to disable many trackers by Google, Facebook and others from the installed apps (and from Google Services if you have them). It will do a search and disable many of the analytics, ads, and firebase services for all user apps
1. Download the
2. Copy it to /data/local/tmp with some root explorer (I used Mixplorer)
3. Give it 755 permission (also used Mixplorer for this, right after pasting)
4. Open a terminal (like Termux or Terminal Emulator)
5. Do the following 2 commands:
6. Wait (maybe a couple minutes depending on the number of apps installed)
7. Done
Warning: there is a small chance some apps will force close after this.
If so you can just reinstall them
https://forum.xda-developers.com/apps/magisk/script-disable-fk-services-trackers-apps-t4074427
Changelog :
- 1.0 : Original version from MOVZX
- 1.1 : add Facebook trackers
- 1.2 : add IAMs trackers read Ars technica article https://arstechnica.com/information-technology/2020/03/4000-android-apps-silently-access-your-installed-software
Credits:
by MOVZX
Updated by rayman95
DanGoodin from Ars Technica
Tutorial by saitama
📡 @NoGoolag 📡 @Libreware
#disablefuckservices #disable #trackers #ads #analytics #firebase #fb #facebook
The goal of this program is to disable many trackers by Google, Facebook and others from the installed apps (and from Google Services if you have them). It will do a search and disable many of the analytics, ads, and firebase services for all user apps
1. Download the
DisableFuckServices12.sh
file2. Copy it to /data/local/tmp with some root explorer (I used Mixplorer)
3. Give it 755 permission (also used Mixplorer for this, right after pasting)
4. Open a terminal (like Termux or Terminal Emulator)
5. Do the following 2 commands:
su
cd /data/local/tmp
sh DisableFuckServices12.sh
6. Wait (maybe a couple minutes depending on the number of apps installed)
7. Done
Warning: there is a small chance some apps will force close after this.
If so you can just reinstall them
https://forum.xda-developers.com/apps/magisk/script-disable-fk-services-trackers-apps-t4074427
Changelog :
- 1.0 : Original version from MOVZX
- 1.1 : add Facebook trackers
- 1.2 : add IAMs trackers read Ars technica article https://arstechnica.com/information-technology/2020/03/4000-android-apps-silently-access-your-installed-software
Credits:
by MOVZX
Updated by rayman95
DanGoodin from Ars Technica
Tutorial by saitama
📡 @NoGoolag 📡 @Libreware
#disablefuckservices #disable #trackers #ads #analytics #firebase #fb #facebook
XDA Forums
[SCRIPT] Disable F**K Services , trackers on all Apps 1.5[04/15]
DISABLE F**K SERVICES
Credits :
MOVZX
saitama
DanGoodin from Ars Technica
Hi, first of all, I'm not a dev but a happy android user and I modify some existing tools to my needs and to...
Credits :
MOVZX
saitama
DanGoodin from Ars Technica
Hi, first of all, I'm not a dev but a happy android user and I modify some existing tools to my needs and to...
Forwarded from BlackBox (Security) Archiv
Over 4000 Android Apps Expose Users' Data via Misconfigured Firebase Databases
More than 4,000 Android apps that use Google's cloud-hosted Firebase databases are 'unknowingly' leaking sensitive information on their users, including their email addresses, usernames, passwords, phone numbers, full names, chat messages and location data.
The investigation, led by Bob Diachenko from Security Discovery in partnership with Comparitech, is the result of an analysis of 15,735 Android apps, which comprise about 18 percent of all apps on Google Play store.
"4.8 percent of mobile apps using Google Firebase to store user data are not properly secured, allowing anyone to access databases containing users' personal information, access tokens, and other data without a password or any other authentication," Comparitech said.
👀 The full contents of the database, spanning across 4,282 apps, included:
‼️ Email addresses: 7,000,000+
‼️ Usernames: 4,400,000+
‼️ Passwords: 1,000,000+
‼️ Phone numbers: 5,300,000+
‼️ Full names: 18,300,000+
‼️ Chat messages: 6,800,000+
‼️ GPS data: 6,200,000+
‼️ IP addresses: 156,000+
‼️ Street addresses: 560,000+
👉🏼 Read more:
https://thehackernews.com/2020/05/android-firebase-database-security.html
#android #app #google #playstore #firebase #database #security #breach #leak
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
More than 4,000 Android apps that use Google's cloud-hosted Firebase databases are 'unknowingly' leaking sensitive information on their users, including their email addresses, usernames, passwords, phone numbers, full names, chat messages and location data.
The investigation, led by Bob Diachenko from Security Discovery in partnership with Comparitech, is the result of an analysis of 15,735 Android apps, which comprise about 18 percent of all apps on Google Play store.
"4.8 percent of mobile apps using Google Firebase to store user data are not properly secured, allowing anyone to access databases containing users' personal information, access tokens, and other data without a password or any other authentication," Comparitech said.
👀 The full contents of the database, spanning across 4,282 apps, included:
‼️ Email addresses: 7,000,000+
‼️ Usernames: 4,400,000+
‼️ Passwords: 1,000,000+
‼️ Phone numbers: 5,300,000+
‼️ Full names: 18,300,000+
‼️ Chat messages: 6,800,000+
‼️ GPS data: 6,200,000+
‼️ IP addresses: 156,000+
‼️ Street addresses: 560,000+
👉🏼 Read more:
https://thehackernews.com/2020/05/android-firebase-database-security.html
#android #app #google #playstore #firebase #database #security #breach #leak
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
Forwarded from BlackBox (Security) Archiv
Google lists which Firebase SDKs require Google Play Services
Google is a pretty ubiquitous name in the Android space. Not only does the company own and maintain the Android Open Source Project itself, but it’s also in charge of the largest distribution platform on Android: the Google Play Store and the underlying Google Mobile Services (GMS) suite. GMS is the important part here. Firebase, Google’s cross-platform toolkit for things like analytics and crash detection, uses GMS to provide a lot of its functionality.
That’s all well and good if your target devices come with Google apps preinstalled, but what if they don’t? What if a user has unlocked their bootloader and flashed a Google-free ROM? What if someone’s using a Huawei device, or they’ve imported a phone from China? Will the Firebase-dependent parts of your app just not work?
Thankfully, if you’re trying to implement Firebase into your app, you don’t need to guess which SDKs will work on Google-free devices and which won’t. Google has helpfully released a list of all its current Firebase SDKs, and whether or not they depend on GMS. You can use this to tell at-a-glance which SDKs you can safely implement and which you may have to supplement or avoid.
💡 👉🏼 Here’s a table listing the Firebase SDKs and whether or not they have GMS dependencies:
https://www.xda-developers.com/google-list-firebase-sdk-require-google-play-services/
💡 👉🏼 https://firebase.google.com/docs/android/android-play-services
#google #list #firebase #sdk #playservices #dependencies
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag
Google is a pretty ubiquitous name in the Android space. Not only does the company own and maintain the Android Open Source Project itself, but it’s also in charge of the largest distribution platform on Android: the Google Play Store and the underlying Google Mobile Services (GMS) suite. GMS is the important part here. Firebase, Google’s cross-platform toolkit for things like analytics and crash detection, uses GMS to provide a lot of its functionality.
That’s all well and good if your target devices come with Google apps preinstalled, but what if they don’t? What if a user has unlocked their bootloader and flashed a Google-free ROM? What if someone’s using a Huawei device, or they’ve imported a phone from China? Will the Firebase-dependent parts of your app just not work?
Thankfully, if you’re trying to implement Firebase into your app, you don’t need to guess which SDKs will work on Google-free devices and which won’t. Google has helpfully released a list of all its current Firebase SDKs, and whether or not they depend on GMS. You can use this to tell at-a-glance which SDKs you can safely implement and which you may have to supplement or avoid.
💡 👉🏼 Here’s a table listing the Firebase SDKs and whether or not they have GMS dependencies:
https://www.xda-developers.com/google-list-firebase-sdk-require-google-play-services/
💡 👉🏼 https://firebase.google.com/docs/android/android-play-services
#google #list #firebase #sdk #playservices #dependencies
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag
XDA Developers
Google lists which Firebase SDKs require Google Play Services
Considering implementing one or more of Google's Firebase SDKs into your app? Check this list to see if they depend on Google Play Services!
Supabase
Open source Firebase alternative
https://github.com/supabase/supabase
#supabase #Firebase #alternatives
Open source Firebase alternative
https://github.com/supabase/supabase
#supabase #Firebase #alternatives
GitHub
GitHub - supabase/supabase: The open source Firebase alternative. Supabase gives you a dedicated Postgres database to build your…
The open source Firebase alternative. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications. - supabase/supabase
Appwrite : An Open Source Firebase Alternative
We're happy to share that we've just released Appwrite 0.8 with a lot of improvements on privacy and security. This brings us one step closer to achieving our goal of becoming a complete open-source alternative to Firebase. Our latest version adds support for JWT auth, ARM devices, Anonymous login, and advanced image manipulations.
We are already working on support for a Realtime database, GraphQL APIs, MongoDB support, and other pretty cool features. We have reached this stage with continued support from the community and we would love to hear your thoughts on how we can make it better. Please feel free to comment below.
You can learn more about Appwrite over at https://github.com/appwrite/appwrite
#firebase #alternatives
We're happy to share that we've just released Appwrite 0.8 with a lot of improvements on privacy and security. This brings us one step closer to achieving our goal of becoming a complete open-source alternative to Firebase. Our latest version adds support for JWT auth, ARM devices, Anonymous login, and advanced image manipulations.
We are already working on support for a Realtime database, GraphQL APIs, MongoDB support, and other pretty cool features. We have reached this stage with continued support from the community and we would love to hear your thoughts on how we can make it better. Please feel free to comment below.
You can learn more about Appwrite over at https://github.com/appwrite/appwrite
#firebase #alternatives
GitHub
GitHub - appwrite/appwrite: Your backend, minus the hassle.
Your backend, minus the hassle. Contribute to appwrite/appwrite development by creating an account on GitHub.
Apple and Google Monitor Notifications. We Need #Push Notification Alternatives
https://tuta.com/blog/open-source-email-fdroid
Comments
#gcm #fcm #firebase
https://tuta.com/blog/open-source-email-fdroid
Comments
#gcm #fcm #firebase
Tutanota
Apple & Google Monitor All Your Push Notifications. That's Why We Need Alternative Notification Providers!
We're here to stop surveillance by corporations like Google and Apple. That's why we replaced Google’s FCM with our own notification system and keep Apple Notification Data at a minimum. Read on to learn why this is important.