18. Juli 2019 | 13:32 Uhr

Firefox Preview: App-Tracking über Drittanbieter Leanplum

Die Preview-Version vom neuen Firefox beinhaltet App-Tracking über den Drittanbieter Leanplum:

We help mobile teams orchestrate multi-channel campaigns — from messaging to the in-app experience — all from a single mobile marketing platform.

Direkt nach dem Start und in regelmäßigen Abständen werden folgende Informationen übermittelt:

POST /api HTTP/1.1
User-Agent: Firefox Preview/1.0.1/app_3hxmWeFEirVaZ8WoSaF4Qoc5BvS4HBQ2qqbOOcopapc/android/4.3.1.0/Android OS/9/s
Content-Type: application/x-www-form-urlencoded
Host: api.leanplum.com
Connection: close
Accept-Encoding: gzip, deflate
Content-Length: 2884

data={"data":[{"country":"(detect)","updateDate":"1.563440134E9","includeDefaults":"false","city":"(detect)","timezone":"Europe\/Berlin","versionName":"1.0.1","locale":"de_DE","deviceId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","deviceName":"Xiaomi Mi A1","systemVersion":"9","uuid":"fe562943-9f9e-4fd4-9ba2-64f634ff4571","systemName":"Android OS","installDate":"1.563440138617E9","action":"start","includeVariantDebugInfo":false,"userAttributes":"{\"klar_installed\":true,\"fennec_installed\":false,\"default_browser\":\"\",\"focus_installed\":false}","newsfeedMessages":[],"userId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","reqId":"9b180ad6-f860-4c3b-ad23-ab878740a52b","devMode":"false","timezoneOffsetSeconds":"7200","background":"true","sdkVersion":"4.3.1.0","deviceModel":"Xiaomi Mi A1","location":"(detect)","time":"1.563447938347E9","region":"(detect)"},{"params":{"source":"APP_ICON"},"deviceId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","userId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","uuid":"fe562943-9f9e-4fd4-9ba2-64f634ff4571","reqId":"105fd93d-6901-42f4-a831-7dcea145e4d3","allowOffline":"true","devMode":"false","action":"track","sdkVersion":"4.3.1.0","time":"1.563447938441E9","event":"E_Opened_App","value":"0.0","info":""},{"allowOffline":"true","devMode":"false","action":"track","sdkVersion":"4.3.1.0","time":"1.563447938478E9","event":"E_Opened_App_FirstRun","deviceId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","userId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","value":"0.0","uuid":"fe562943-9f9e-4fd4-9ba2-64f634ff4571","reqId":"4de9677c-93ac-4392-b6ea-d8a780c9ed01","info":""},{"devMode":"false","action":"resumeSession","sdkVersion":"4.3.1.0","time":"1.563447938549E9","deviceId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","userId":"15a8d6e1-fe33-43ec-8f93-1c886746681e","uuid":"fe562943-9f9e-4fd4-9ba2-64f634ff4571","reqId":"c2d19107-1280-4f52-a739-a0810d26a2bd"}]}&clientKey=prod_3QdDDxMzhKEzDDXfaYf3cS7beyfBjhDoFrid7Nu05Lg&appId=app_3hxmWeFEirVaZ8WoSaF4Qoc5BvS4HBQ2qqbOOcopapc&client=android&action=multi&sdkVersion=4.3.1.0&time=1.563447938553E9

Unter anderem wird abgefragt, ob die anderen Mozilla-Browser Fennec, Klar oder Focus ebenfalls auf dem Gerät installiert sind. Weiterhin bekommt man eine User- und Device-ID zugewiesen. Informationen um welches Gerät es sich handelt usw. werden ebenfalls übermittelt.

Im Grunde genommen werden da keine hochsensiblen Daten übermittelt, andererseits ist das eben Tracking. Ich persönlich finde den Einbau von externen Tracking-Anbietern, bei einem Browser, der mit Privatsphäre wirbt und zudem selbst einen Schutz vor Aktivitätenverfolgung integriert hat, befremdlich. Zumal Mozilla selbst nochmal Telemetrie-Daten erhebt und diese an »incoming.telemetry.mozilla.org« versendet:

POST /submit/org-mozilla-fenix/events/1/7f6af42a-4af3-4d32-a325-d4a5192effd0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: */*
Connection: close
Content-Type: application/json; charset=utf-8
User-Agent: Glean/0.56.5 (Android)
Date: Thu, 18 Jul 2019 11:16:57 GMT
X-Client-Type: Glean
X-Client-Version: 0.56.5
Host: incoming.telemetry.mozilla.org
Content-Length: 895

{"events":[{"timestamp":0,"category":"events","name":"search_bar_tapped","extra":{"source":"HOME"}},{"timestamp":12088,"category":"events","name":"entered_url","extra":{"autocomplete":"false"}},{"timestamp":14294,"category":"quick_action_sheet","name":"opened"},{"timestamp":16298,"category":"quick_action_sheet","name":"closed"},{"timestamp":82720,"category":"events","name":"search_bar_tapped","extra":{"source":"BROWSER"}}],"ping_info":{"ping_type":"events","seq":0,"start_time":"2019-07-18T13:14+02:00","end_time":"2019-07-18T13:16+02:00"},"client_info":{"telemetry_sdk_build":"0.56.5","first_run_date":"2019-07-18+02:00","os":"Android","android_sdk_version":"28","os_version":"9","device_manufacturer":"Xiaomi","device_model":"Mi A1","architecture":"arm64-v8a","app_channel":"release","app_build":"11891918","app_display_version":"1.0.1","client_id":"ff3f91e9-1394-487f-9337-4aa52347643d"}}

Über Einstellungen -> Datenübermittlung -> Telemetrie könnt ihr das Tracking an Leanplum deaktivieren.

Der Kuketz-Blog ist spendenfinanziert! Mitmachen ➡