1420886 - Signature of tracker "DoubleClick" detected in Fennec APKs (per reports.exodus-privacy.eu.org)

Status: RESOLVED FIXED

(Firefox for Android Graveyard :: General, defect)

Description

[Johan Lorenzo [:jlorenzo] - On PTO - Back on July 28th]

The εxodus privacy auditing platform[1] is a website that aims to identify trackers in APKs. They detected DoubleClick in the APK of Firefox[2] (Focus doesn't contain any[3]). 

They perform static analysis of APKs[4]. They don't provide much details on how it's done, mainly because they started this project 3 months ago[5]. 

I don't know if DoubleClick is intended to be in the product, or if it's a false positive. :sebastian said it looks weird. What do you think, Nevin? 

[1] https://reports.exodus-privacy.eu.org/
[2] https://reports.exodus-privacy.eu.org/reports/177/
[3] https://reports.exodus-privacy.eu.org/reports/176/
[4] https://exodus-privacy.eu.org/analysis.html
[5] [french] https://www.nextinpact.com/news/105655-rencontre-avec-exodus-privacy-qui-revele-trackers-applications-android.htm

Comment 1

[Richard Newman [:rnewman]]

See discussion on Twitter:

https://twitter.com/chrlyblck/status/934850825570148353

My wild speculation is that Google Play Services includes some of their ad tracking code, enough to carry a fingerprint of DoubleClick.

Comment 2

[Teng-pao Yu [:tyu]]

Methodology: https://exodus-privacy.eu.org/analysis.html
Doubleclick rule: https://reports.exodus-privacy.eu.org/trackers/5/

So, I tried to dump the dexes to see if we do have some intended traffic toward mng-ads\.com or doubleclick\.net

Haven't seem such hardcoded links but I've seen some classes under doubleclick package:

(On Fennec 57)

tyu-40227:26.0.1 tyu$ cat /Users/tyu/Downloads/fennec-57.0b15.en-US.android-arm/dump | grep mng-ads
tyu-40227:26.0.1 tyu$ cat /Users/tyu/Downloads/fennec-57.0b15.en-US.android-arm/dump | grep doubleclick
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/AppEventListener;)
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/CustomRenderedAd;'
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/CustomRenderedAd;)V'
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #6              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #7              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdView;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '()Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #6              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '()Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;'
    #7              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #8              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #9              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #10              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #11              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #12              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
    #13              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #14              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #15              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;)V'
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;'
      type          : 'Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;'
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '()Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '()Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;'
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
      type          : '(Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;)V'
      type          : 'Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;'
      type          : 'Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;'
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '(Landroid/content/Context;Lcom/google/android/gms/ads/internal/client/zzh;Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)V'
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
    #0              : 'Lcom/google/android/gms/ads/doubleclick/CustomRenderedAd;'
      type          : 'Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;'
      type          : '(Lcom/google/android/gms/ads/doubleclick/OnCustomRenderedAdLoadedListener;)V'


The earliest version I've seen this is 33:

tyu-40227:testFolder tyu$ /Users/tyu/.mozbuild/android-sdk-macosx/build-tools/26.0.1/dexdump classes.dex > dump
tyu-40227:testFolder tyu$ cat dump | grep doubleclick
tyu-40227:testFolder tyu$

  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/AppEventListener;)
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$1;'
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)Lcom/google/android/gms/internal/au$a;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Ljava/lang/Class;Landroid/os/Bundle;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Ljava/lang/String;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Lcom/google/android/gms/ads/mediation/NetworkExtras;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Ljava/lang/Class;Landroid/os/Bundle;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Ljava/lang/String;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '()Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;'
    #6              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Ljava/util/Date;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #7              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Ljava/lang/String;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0035 reg=6 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #8              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(I)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #9              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Landroid/location/Location;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #10              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Z)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #11              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Ljava/lang/String;)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #12              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)
      type          : '(Z)Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #6              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #7              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;)V'
        0x0000 - 0x000f reg=2 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
        0x0000 - 0x000f reg=3 builder Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder;Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$1;)V'
        0x0000 - 0x0004 reg=0 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
        0x0000 - 0x0004 reg=1 x0 Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$Builder; 
        0x0000 - 0x0004 reg=2 x1 Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest$1; 
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
        0x0000 - 0x0007 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #6              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #7              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #8              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
        0x0000 - 0x0007 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
    #9              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
        0x0000 - 0x0007 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
    #10              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
    #11              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)
        0x0000 - 0x0007 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdView;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x000b reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x000c reg=2 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x000c reg=2 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '()Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
    #6              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)V'
        0x0000 - 0x000a reg=2 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
        0x0000 - 0x000a reg=3 publisherAdRequest Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
    #7              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x0027 reg=5 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #8              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x004b reg=5 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #9              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #10              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #11              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #12              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #13              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x0014 reg=2 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #14              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
    #15              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherAdView; 
        0x0000 - 0x0006 reg=2 appEventListener Lcom/google/android/gms/ads/doubleclick/AppEventListener; 
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
        0x0000 - 0x000b reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd; 
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
      type          : '()Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest;)V'
        0x0000 - 0x000a reg=2 this Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd; 
        0x0000 - 0x000a reg=3 publisherAdRequest Lcom/google/android/gms/ads/doubleclick/PublisherAdRequest; 
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd; 
    #6              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd; 
    #7              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
        0x0000 - 0x0006 reg=1 this Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd; 
        0x0000 - 0x0006 reg=2 appEventListener Lcom/google/android/gms/ads/doubleclick/AppEventListener; 
    #8              : (in Lcom/google/android/gms/ads/doubleclick/PublisherInterstitialAd;)
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '()Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
        0x0000 - 0x001c reg=3 appEventListener Lcom/google/android/gms/ads/doubleclick/AppEventListener; 
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '()Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
        0x0000 - 0x001c reg=3 appEventListener Lcom/google/android/gms/ads/doubleclick/AppEventListener;

The scope later shrinks in 35 (Did we do something to build only what we want? Or probably proguard?) :

tyu-40227:testFolder tyu$ /Users/tyu/.mozbuild/android-sdk-macosx/build-tools/26.0.1/dexdump classes.dex > dump
tyu-40227:testFolder tyu$ cat dump | grep doubleclick
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
  Class descriptor  : 'Lcom/google/android/gms/ads/doubleclick/PublisherAdView;'
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #0              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #1              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #2              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #3              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #4              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
    #5              : (in Lcom/google/android/gms/ads/doubleclick/PublisherAdView;)
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;'
      type          : '(Lcom/google/android/gms/ads/doubleclick/AppEventListener;)V'
      type          : 'Lcom/google/android/gms/ads/doubleclick/AppEventListener;

The scope is later enlarged again to what I've posted in the begining, Maybe something to do with Adjust, Push Notification, and LeanPlum?

I'm also unceratin whether this report is detecting the PublisherAdView, or some classes added later, or even some classes not revealed in my tests.

Comment 3

[Johan Lorenzo [:jlorenzo] - On PTO - Back on July 28th]

I don't know if this will help: Qwant reported[1] that DoubleClick is embedded in the CrossWalk open source library[2], in their Android app.

[1] https://blog.qwant.com/exodus-privacy-result-of-our-investigation-regarding-reported-trackers/
[2] https://github.com/crosswalk-project/chromium-crosswalk/blob/af36cc3ce3f5fcb8033f16236725718f8012abfe/components/variations/net/variations_http_headers.cc#L22

Comment 4

[Sebastian Kaspari (:sebastian; :pocmo)]

Focus doesn't seem to affected and we do include Adjust as well as play-services-analytics (dependency of Adjust).

Comment 5

[Joe Cheng [:jcheng] (please needinfo)]

per Nevin, it looks like focus’s Adjust uses 10.2.6 but Fennec uses 8.4.0. Not sure if this would be the reason but a good lead

Comment 6

[Richard Newman [:rnewman]]

(In reply to Teng-pao Yu [:tyu] from comment #2)

> The scope later shrinks in 35 (Did we do something to build only what we
> want? Or probably proguard?) :
…
> The scope is later enlarged again to what I've posted in the begining, Maybe
> something to do with Adjust, Push Notification, and LeanPlum?

Yeah, this has almost certainly churned over the years thanks to Bug 1108782/Bug 1115004/Bug 1233238 and similar build tweaks.

Adjust IIRC was integrated in Firefox 38 with Bug 1143888.

Comment 7

[Teng-pao Yu [:tyu]]

(In reply to Joe Cheng [:jcheng] (please needinfo) from comment #5)
> per Nevin, it looks like focus’s Adjust uses 10.2.6 but Fennec uses 8.4.0.
> Not sure if this would be the reason but a good lead

To echo this, I've tried a similar dex dump on Focus and I haven't seen these DoubleClick classes.

Comment 8

[Nevin Chen(Not active on Bugzilla)]

Attachment: Bug 1420886 - Replace -ads with -analytics.

Looking at latest Adjust SDK [1]
compile 'com.google.android.gms:play-services-analytics:10.2.1'
should be enough. And it doesn't have DoubleClick in it (testing with dexdump)	.
Even Adjust has change from -ads to -analytics [2]

I just build/test with below options.

export MOZ_INSTALL_TRACKING=1
ac_add_options --with-adjust-sdk-keyfile=.....

export MOZILLA_OFFICIAL=1
export MOZ_TELEMETRY_REPORTING=1

export MOZ_ANDROID_MMA=1
ac_add_options --with-leanplum-sdk-keyfile=.....

and it works for below places where we have have com.google.android.gms.ads.identifier.AdvertisingIdClient  : Leanplum[3] and Adjust[4]

[1] https://github.com/adjust/android_sdk

[2] https://github.com/adjust/android_sdk/issues/143

[3] https://searchfox.org/mozilla-central/rev/9f3bd430c2b132c86c46126a0548661de876799a/mobile/android/thirdparty/com/leanplum/internal/Util.java#204

[4] https://searchfox.org/mozilla-central/rev/9f3bd430c2b132c86c46126a0548661de876799a/mobile/android/thirdparty/com/adjust/sdk/Reflection.java#97

Review commit: https://reviewboard.mozilla.org/r/203842/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/203842/

Comment 9

[Nevin Chen(Not active on Bugzilla)]

more info: 
Adjust changed -ads to -analytics
https://github.com/adjust/android_sdk/commit/46955eb81ec5572a4ad933722d53b0e06e8f187e

Comment 10

[Iacopo Benesperi [:iacchi]]

I don't know how Fennec is build, but that Adjust commit (which if I well understood removes ads, i.e. doubleclick) is more that two years old. Are we building Fennec with more that two years old code?

Comment 11

[Max Liu [:maliu]]

Comment on attachment 8932785 [details]
Bug 1420886 - Replace -ads with -analytics.

https://reviewboard.mozilla.org/r/203842/#review210042

Comment 12

[Teng-pao Yu [:tyu]]

I should have noticed this earlier:
In https://exodus-privacy.eu.org/analysis.html there is a video exposing the whole script/process Exodus is using.

Basically, they're dumping the dex file directly and filtering / tokenizing with the command `strings`
What I've been doing was dumping the byte code only, but with the command they're doing:
`strings classes.dex | grep doubleclick\.net`
They're also taking a look at the string tables, and this is the output:

.doubleclick.net
H//googleads.g.doubleclick.net/mads/static/mad/sdk/native/native_ads.html
ad.doubleclick.net
googleads.g.doubleclick.net
[https://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_banner.js
dhttps://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_expanded_banner.js
ahttps://googleads.g.doubleclick.net/mads/static/mad/sdk/native/mraid/v2/mraid_app_interstitial.js
Phttps://googleads.g.doubleclick.net/mads/static/mad/sdk/native/sdk-core-v40.html

This should be the basis of Exodus' claim. So let's check if we still see these after the commit has landed.

Comment 13

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a2d21877eb2d
Replace -ads with -analytics. r=maliu

Comment 14

[Nevin Chen(Not active on Bugzilla)]

MOZ_INSTALL_TRACKING is only true in beta and release.
So we may need to wait for this bug goes to beta and see the result

Comment 15

[Bogdan Tara[:bogdan_tara | bogdant]]

https://hg.mozilla.org/mozilla-central/rev/a2d21877eb2d