YSK: The bitwarden android app contains google and microsoft trackers

https://github.com/bitwarden/android/issues/649

You can download it from F-Droid or use the F-Droid release flavour when downloading from github, but IMO they should be removed from all releases

59 points · 13 comments · view on lemmy.world

13 Comments

smeg@feddit.uk · 58 pts · 1y (2 replies)
[ removed ]
cmgvd3lw@discuss.tchncs.de · 5 pts · 1y

My fdroid version also syncs, then why use firebase for pushing notifications?

isolatedscotch@discuss.tchncs.de · 4 pts · 1y

you are right, but you'd think a privacy focused open source password manager wouldn't connect to big corps in the background

sabreW4K3@lazysoci.al · 17 pts · 1y (1 reply)

6 years old bug report?

isolatedscotch@discuss.tchncs.de · -8 pts · 1y

Still valid tho (although exodus doesn't report google trackers on it for some reason, it still connects to firebase)

Shadow@lemmy.ca · 13 pts · 1y

Seems like that bug report is out of date now, the url they link to only has a Microsoft crash reporting tool:

https://reports.exodus-privacy.eu.org/en/reports/com.x8bit.bitwarden/latest/

SteveCC@lemmy.world · 5 pts · 1y (4 replies)

I searched fdroid and didn't find it.

jws_shadotak@sh.itjust.works · 5 pts · 1y (2 replies)
SteveCC@lemmy.world · 3 pts · 1y (1 reply)

Get this warning 1000009987

jws_shadotak@sh.itjust.works · 7 pts · 1y

That's F-Droid's generic warning about third party stuff. It's Bitwarden's repo, not F-Droid's.

https://mobileapp.bitwarden.com/

mp3@lemmy.ca · 3 pts · 1y

They host their own F-Droid repo

comfydecal@infosec.pub · 2 pts · 1y

Somewhat adjacent, but this doesn't surpise me since when watching network traffic from "private" or "analytics-removed" forks of FOSS projects they still tend to ping a dozen servers on start up. Not saying all, Keepass for instance is a good example

deadcatbounce@reddthat.com · 1 pts · 1y
[ removed ]
Mwa@lemm.ee · 0 pts · 1y
[ removed ]
nutbutter@discuss.tchncs.de · 0 pts · 1y (1 reply)

I use Bitwarden app from their f-droid repo. I also use Rethink DNS app that manages all the DNS queries. I have never seen it connect to any Google or Firebase domains. But, I host my own Vaultwarden, maybe that's why?

dko1905@discuss.tchncs.de · 1 pts · 1y

You could at least have read the 2nd comment on the issue, the f-droid app has no crash reporting and does not use Google Firebase for sync updates.