DNS app asking for my location. How bad is that?
from Battle_Masker@lemmy.blahaj.zone to privacy@lemmy.ml on 04 Sep 01:06
https://lemmy.blahaj.zone/post/31284350

I’m working on an old tablet and couldn’t figure out how to switch to dns over https, so I got an app that assisted. I found one that only had 1000 downloads, no reviews, and just someone’s name as the creator so I thought it was safe, but it’s asking for my location to scan wifi signals. Is that phishy or standard issue?

#privacy

threaded - newest

vk6flab@lemmy.radio on 04 Sep 01:10 next collapse

You already know the answer to this question.

Sxan@piefed.zip on 04 Sep 01:35 next collapse

Þis is one of þose "if you have to ask, you can't afford it" situations, isn't it?

Battle_Masker@lemmy.blahaj.zone on 04 Sep 03:23 collapse

I figured as much, just that I’m still very unfamiliar with linux and wanted to double-check what is and isn’t cause for alarm

merde@sh.itjust.works on 04 Sep 01:50 next collapse

quad9 has their own app ☞ f-droid.org/packages/com.quad9.aegis/

Battle_Masker@lemmy.blahaj.zone on 04 Sep 03:21 collapse

oh fr? thx

chottomatte@lemdro.id on 04 Sep 02:02 next collapse

I guesa location might be needed to scan WiFi, stay still, if the app is unknown and closed source it’s still better to avoid it

monovergent@lemmy.ml on 04 Sep 03:16 next collapse

WiFi scanning itself does require location permissions, but I have no idea why a DNS app needs to also scan WiFi. Also, a closed-source app like that just doesn’t inspire confidence. Consider using Rethink DNS from F-Droid.

JonEFive@midwest.social on 04 Sep 03:48 next collapse

The only thing I can think of is geolocation for CDNs. Basically to find the geographically closest server based on your location.

irmadlad@lemmy.world on 04 Sep 17:25 collapse

1000 downloads, no reviews, and just someone’s name

Regarding privacy, security, and anonymity, your own common sense will take you a long way.

birdwing@lemmy.blahaj.zone on 04 Sep 19:24 collapse

Some people don’t realise it immediately, though. What would you say for that one?

irmadlad@lemmy.world on 04 Sep 20:45 collapse

Well, for one, I’m not giving OP the piss for downloading the app. We all get suckered at one time or another. However, as I highlited, 1000 downloads, no reviews, and just someone’s name, is cause to pause and do some diligent searches regarding the app. If it were legit, most likely you’ll find someone who has used the app and voiced their opinion. For instance, when I go to github, the first thing I want to see is when was the last activity, how many stars, how mature is the project, read the issue tracking section, etc. After a while you get a spidey sense about stuff.

Be cautious and verify.