Started By
Message

I have an app idea, where do I go to get it made?

Posted on 1/10/21 at 9:03 pm
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/10/21 at 9:03 pm
I used Elance over 10 years ago for a couple projects, but I'm not sure if there's a new place to get stuff done. Worked with this guy in Bulgaria, It was pretty much a waste of a few hundred dollars. He did the job, but didn't bring any creativity or suggestions to the table, and the application created had a fatal flaw that once I figured out he never responded to the other inquiries.

Anyway, my idea's fairly simple, but it takes someone with knowledge of things I have no knowledge of.

What I'm looking for is an application that scans the phone for applications on the phone, and then mimics the API of those applications.

Any suggestions?


Need to know if what I want to do can be done, and then someone to do it.


For anyone interested, The app I created before was not smartphone related. It interacted with the master audio of a computer to take over the peak meter for normalization of sound where you only adjust volume once to level that you like, It would automatically turn up or turn down the volume based on the different medium. If you guys remember, you would play YouTube videos, and all of a sudden a video would come up and be blaring loud. It really pissed me off so that's why I had the guy create it. It worked perfectly, except when the volume went to zero, The app would turn the volume up to the loudest setting trying to find volume, I just needed the guy to have it reset 50% level after 1 second of silence, so that the next sound that came out wasn't blaring. But I never get the guy to work on it again, and everybody else I reached out to wanted to start from scratch so I scrap the idea.

This post was edited on 1/10/21 at 9:20 pm
Posted by Korkstand
Member since Nov 2003
28997 posts
Posted on 1/10/21 at 9:21 pm to
quote:

What I'm looking for is an application that scans the phone for applications on the phone
This is easy on Android, can probably knock it out in an hour. I don't know if this is allowed on iPhone.
quote:

and then mimics the API of those applications.
I don't know what you mean by this, or how you expect to figure out what each app is supposed to do.
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/10/21 at 9:25 pm to
Essentially I want to know the electronic location that it sends user data and the format.
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/10/21 at 9:38 pm to
So from my limited understanding.

Data collected is sent to a URL of some sort.

And that URL is looking for data to be submitted in a certain format, i.e. column headers' to populate their data tables.

App does:

1. Grabs a list of all the apps installed
2. Finds out where the app sends data
3. Determines the data 'column headers' if you will, is being sent (what info is being sent) (i.e. name, location, search history, etc)

Is that all doable?

This is part one of the app
This post was edited on 1/10/21 at 10:05 pm
Posted by SG_Geaux
Beautiful St George, LA
Member since Aug 2004
79558 posts
Posted on 1/10/21 at 10:30 pm to
Well this doesn't sound sketchy at all.
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1555 posts
Posted on 1/10/21 at 10:44 pm to
Packet Capture app might be what you are looking for.
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/10/21 at 11:17 pm to
Actually not at all..I don't have access to the data sent, and the app is designed for another purpose that the user knows, not hidden in terms and conditions.
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/10/21 at 11:21 pm to
quote:

Packet Capture app


Not familiar but looking it up, I guess that is kind of what I'm looking for.

So the question, how do receivers validate data transmissions?

The one I worked with before, sent a feedback message for "received", so that the app doesn't continue to try to send the same information over and over again.

We had an issue with our API, that was causing roughly 14,000 transmissions to be sent to the tune of 4 million transmissions a day because the "received" wasn't being sent back
Posted by TigerinATL
Member since Feb 2005
62437 posts
Posted on 1/10/21 at 11:56 pm to
quote:

2. Finds out where the app sends data
3. Determines the data 'column headers' if you will, is being sent (what info is being sent) (i.e. name, location, search history, etc)


Is this a privacy app to make data collection more transparent, because Apple is already doing something similar with the latest iOS which is pissing off companies like Facebook and Google.

quote:

Apple's new App Tracking and Transparency feature makes it easy for you to see all the data developers collect about you before you download an app.

LINK
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/11/21 at 9:43 am to
No, I want to do something different.

The last part of my app is the "could you and would it be legal to" part of the app.
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1555 posts
Posted on 1/11/21 at 9:50 am to
quote:

So the question, how do receivers validate data transmissions?

The one I worked with before, sent a feedback message for "received" so that the app doesn't continue to try to send the same information over and over again.


The client sends a request to an API endpoint and the API endpoint should respond back. If everything goes fine you get a 200 response, likely with a payload of some sort containing the information you requested or containing a human-readable message for the client like 'success'. If the server received the request and there is an error, like you aren't authenticated, you will get the corresponding code for that error and likely a human-readable message to accompany that error. If there is a client error, like no internet connection, you should handle that on the client side. If no response is sent back to the client the request will hang for a while waiting, but should eventually time-out.

quote:

We had an issue with our API, that was causing roughly 14,000 transmissions to be sent to the tune of 4 million transmissions a day because the "received" wasn't being sent back


I would probably set this up so that a reattempt is only made based on feedback from the server and be sure your server is sending proper feedback. For instance, a 200 OK response, no reattempt. A 401 not authorized response, no reattempt. A 408 request timeout response, try to send the request again.
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/11/21 at 10:15 am to
Is part of that validation that it was in response to a query?

Like if the app collects location data, is it.

Ie. (qwe4562edr768) Where are you ? I am here. qwe4562edr768 Validated.

Or.

I am here. Validated.I am here. Validated.I am here. Validated.


In your experience does the API validate based on a certain prescribed algorithm. Like I want location data every 30 seconds so I send a query asking where the user is, and then I expect a response with that query? How does the app know how often to send location data?
This post was edited on 1/11/21 at 10:23 am
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1555 posts
Posted on 1/11/21 at 11:26 am to
Typical APIs are one way. The client sends a message to the server and the server responds. You can open up two way communication by using something like Socket.io.

quote:

In your experience does the API validate based on a certain prescribed algorithm. Like I want location data every 30 seconds so I send a query asking where the user is, and then I expect a response with that query? How does the app know how often to send location data?


An easier way to do this is to have the app send the info to the server, not the other way around. How does the app know when to send the data? Easy, because you programmed it to send a request to the server with it's location every X amount of time.

This would be a lot easier if you just stated what you want to accomplish so those in the know could provide input on how to accomplish that instead of you asking abstract questions trying to logic it yourself. Trust me, no one is going to steal your idea until you are successful with it and by that time your idea is already out there for all to copy.
This post was edited on 1/11/21 at 3:50 pm
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/11/21 at 11:44 am to
(no message)
This post was edited on 1/11/21 at 1:07 pm
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1555 posts
Posted on 1/11/21 at 1:00 pm to
Seems like that would really mess up your ability to use any apps.
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/11/21 at 1:09 pm to
Maybe a couple mapping apps, which my app would work to tweak permissions.

Like if it's a map app, location data is accurate.

If it's a game app like Candy crush, then it's not

It would start with the top 20 apps, then add more, then add more.

I see it as an evolution of the ad blocker app that so many people decided to use.

Is it doable? I assume that mac addresses are used to validate, otherwise could I just send data directly to their API?
This post was edited on 1/11/21 at 1:24 pm
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1555 posts
Posted on 1/11/21 at 3:48 pm to
quote:

I assume that mac addresses are used to validate, otherwise could I just send data directly to their API?


Protected APIs authenticate with things like cookies/sessions, JSON web tokens (JWT) and other forms of creating a "key" that can be stored on the client and sent to the server. The server checks the validity of the session, JWT, or whatever key that was sent by the client and allows/denies access based on if it passes the test.

I wouldn't be worried about Candy Crush sending your location to the server. Is that a thing? The bigger problem with your app is going to be determining when using a "location" app like say Google Maps, when to allow location data be sent and when to scramble it. In short sure, you could write an app that intercepts requests and changes the payload. It would likely be specific to each app and depending on how you implement it may be an expensive app to run (commands a lot of resources), which does not bode well for a phone app.
Posted by Kujo
225-911-5736
Member since Dec 2015
6031 posts
Posted on 1/11/21 at 5:10 pm to
I imagine that once I have the data and frequency each app commands...candy crush, airbnb, lyft, door dash, twitter, etc.

That I can streamline the interference. (Everyone who uses these common apps would have the exact same type of interference)

I could have it run while on Wi-Fi and plugged in. The idea is to corrupt, as you can't completely hide. Erroneous data calls in the question all data.


I'll get an ad for diapers still, but also an ad for bowling balls, Opera, PETA, private schools in Massachusetts, hunting rifles.

Advertisers will then be less likely to pay them, as their ad results would not lead to sales.
This post was edited on 1/11/21 at 5:14 pm
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1555 posts
Posted on 1/12/21 at 7:11 am to
I would start by using something like Packet Capture and collecting request to establish a valid sample size. Then look at the request body (payload to the server) and see if you can logic an algorithm from there that accomplishes what you want keeping in mind the user needs to be able to still use the app.
Posted by Korkstand
Member since Nov 2003
28997 posts
Posted on 1/12/21 at 9:08 am to
Sounds like you're trying to set up a man-in-the-middle attack. I believe the only way this has a chance of working is if whoever installs this app trusts YOU with all of their data. Also some apps (most that use very private data) use certificate pinning (they don't trust the device's cert) so this attack won't work.

The goal is to have non-targeted ads delivered by spoofing location or other data on a per-app basis? Most probably impossible. You'll be fighting against a multi-hundred-billion dollar industry which spends unimaginable resources to get targeted ads right.

You can spoof device location such that all apps get it wrong. I'm not sure if your app can toggle spoofing on and off automatically depending on the active app, but regardless I doubt this will do much to impact targeted ads.
first pageprev pagePage 1 of 2Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on X, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookXInstagram