Cycorder Privacy Issues

[Sidonuke]

Hello I'm here to inform users of the popular free video recording application created by saurik.

This was discovered on my iphone

DavidB-iPhone:/private/var/mobile/Library/Cycorder/CodeFab/MMTracking
root# sqlite3 ./MMTracking.sql
SQLite version 3.5.9
Enter ".help" for instructions
sqlite> .tables
trackedEvents
sqlite> .dump trackedEvents
BEGIN TRANSACTION;
CREATE TABLE trackedEvents ( dbID INTEGER NOT NULL PRIMARY KEY
AUTOINCREMENT, wasBroadcast INTEGER NOT NULL, timestamp REAL NOT NULL,
eventType CHAR(50) NOT NULL, connStatus CHAR(20) NOT NULL, latitude REAL
NOT NULL, longitude REAL NOT NULL, altitude REAL NOT NULL, userDict TEXT);
INSERT INTO "trackedEvents"
VALUES(1,0,1229923273.68631,'AdMob:Confirm','NotConnected',0.0,0.0,0.0,'(null)');
INSERT INTO "trackedEvents"
VALUES(2,0,1229923274.54035,'UIApplicationDidFinishLaunchingNotification','NotConnected',0.0,0.0,0.0,'(null)');
INSERT INTO "trackedEvents"
VALUES(3,0,1229923275.32488,'AdMob:Failure','NotConnected',0.0,0.0,0.0,'(null)');
INSERT INTO "trackedEvents"
VALUES(4,0,1229923343.69344,'Video:Record','WiFiConnected',0.0,0.0,0.0,'(null)');
INSERT INTO "trackedEvents"
VALUES(5,0,1229923357.99332,'Video:Record','WiFiConnected',0.0,0.0,0.0,'(null)');
INSERT INTO "trackedEvents"
VALUES(6,0,1229923367.20874,'UIApplicationWillTerminateNotification','WiFiConnected',0.0,0.0,0.0,'(null)');
COMMIT;
sqlite>

Note that location services was disabled so position wasnt reported.

The application monitors your actions and calls back apparently with the above information.

Delete/Stop Tracking:
# cd /private/var/mobile/Library/Cycorder/CodeFab/MMTracking
# wget sidonuke.com/killinfo.sql
# sqlite3 MMTracking.sql
> .read killinfo.sql
> .exit
# chmod MMTracking.sql 444

saurik has been contacted and pending comment.

It just got worse...

DavidB-iPhone:/private/var/mobile/Library/Preferences root# plutil com.saurik.cycorder.plist
2008-12-22 00:49:23.003 plutil[1280:10b] {
    MMBroadcastInterval = 1440;
    MMBroadcastMade = 1;
    MMBroadcastURL = "http://t.medialytics.com/EC/WebObjects/EC.woa/wa/ue";
}

It sends data to a external source....

[461am]

Looks like location-based advertising. So what's new?

[Sidonuke]

From saurik

I actually don't have direct access to this database. It goes to Medialets,
a company that aggregates and anonymizes the information as part of their
Medialytics platform, so that I can determine things like "how popular is
this feature". In point of truth I don't even get the information: their
service was a buggy piece of **** and Cycorder was apparently way more
popular than they ever thought their service would need to scale to. For
more information you can visit their website: Medialytics | Medialets.
HAH... apparently they are currently offline, due to too much traffic...
they really do suck. -J

So the issue has been answered and shouldn't be a big concern i guess. but still i hate talkbacks about my location >.>

[kjack05]

This is kind of scary. I really dont like the idea of that being sent without prior knowledge.

[iamse7en]

Bah. Who freakin' cares.