- My Forums
- Tiger Rant
- LSU Recruiting
- SEC Rant
- Saints Talk
- Pelicans Talk
- More Sports Board
- Fantasy Sports
- Golf Board
- Soccer Board
- O-T Lounge
- Tech Board
- Home/Garden Board
- Outdoor Board
- Health/Fitness Board
- Movie/TV Board
- Book Board
- Music Board
- Political Talk
- Money Talk
- Fark Board
- Gaming Board
- Travel Board
- Food/Drink Board
- Ticket Exchange
- TD Help Board
Customize My Forums- View All Forums
- Show Left Links
- Topic Sort Options
- Trending Topics
- Recent Topics
- Active Topics
Started By
Message
I have an app idea, where do I go to get it made?
Posted on 1/10/21 at 9:03 pm
Posted on 1/10/21 at 9:03 pm
I used Elance over 10 years ago for a couple projects, but I'm not sure if there's a new place to get stuff done. Worked with this guy in Bulgaria, It was pretty much a waste of a few hundred dollars. He did the job, but didn't bring any creativity or suggestions to the table, and the application created had a fatal flaw that once I figured out he never responded to the other inquiries.
Anyway, my idea's fairly simple, but it takes someone with knowledge of things I have no knowledge of.
What I'm looking for is an application that scans the phone for applications on the phone, and then mimics the API of those applications.
Any suggestions?
Need to know if what I want to do can be done, and then someone to do it.
For anyone interested, The app I created before was not smartphone related. It interacted with the master audio of a computer to take over the peak meter for normalization of sound where you only adjust volume once to level that you like, It would automatically turn up or turn down the volume based on the different medium. If you guys remember, you would play YouTube videos, and all of a sudden a video would come up and be blaring loud. It really pissed me off so that's why I had the guy create it. It worked perfectly, except when the volume went to zero, The app would turn the volume up to the loudest setting trying to find volume, I just needed the guy to have it reset 50% level after 1 second of silence, so that the next sound that came out wasn't blaring. But I never get the guy to work on it again, and everybody else I reached out to wanted to start from scratch so I scrap the idea.
Anyway, my idea's fairly simple, but it takes someone with knowledge of things I have no knowledge of.
What I'm looking for is an application that scans the phone for applications on the phone, and then mimics the API of those applications.
Any suggestions?
Need to know if what I want to do can be done, and then someone to do it.
For anyone interested, The app I created before was not smartphone related. It interacted with the master audio of a computer to take over the peak meter for normalization of sound where you only adjust volume once to level that you like, It would automatically turn up or turn down the volume based on the different medium. If you guys remember, you would play YouTube videos, and all of a sudden a video would come up and be blaring loud. It really pissed me off so that's why I had the guy create it. It worked perfectly, except when the volume went to zero, The app would turn the volume up to the loudest setting trying to find volume, I just needed the guy to have it reset 50% level after 1 second of silence, so that the next sound that came out wasn't blaring. But I never get the guy to work on it again, and everybody else I reached out to wanted to start from scratch so I scrap the idea.
This post was edited on 1/10/21 at 9:20 pm
Posted on 1/10/21 at 9:21 pm to Kujo
quote:This is easy on Android, can probably knock it out in an hour. I don't know if this is allowed on iPhone.
What I'm looking for is an application that scans the phone for applications on the phone
quote:I don't know what you mean by this, or how you expect to figure out what each app is supposed to do.
and then mimics the API of those applications.
Posted on 1/10/21 at 9:25 pm to Korkstand
Essentially I want to know the electronic location that it sends user data and the format.
Posted on 1/10/21 at 9:38 pm to Kujo
So from my limited understanding.
Data collected is sent to a URL of some sort.
And that URL is looking for data to be submitted in a certain format, i.e. column headers' to populate their data tables.
App does:
1. Grabs a list of all the apps installed
2. Finds out where the app sends data
3. Determines the data 'column headers' if you will, is being sent (what info is being sent) (i.e. name, location, search history, etc)
Is that all doable?
This is part one of the app
Data collected is sent to a URL of some sort.
And that URL is looking for data to be submitted in a certain format, i.e. column headers' to populate their data tables.
App does:
1. Grabs a list of all the apps installed
2. Finds out where the app sends data
3. Determines the data 'column headers' if you will, is being sent (what info is being sent) (i.e. name, location, search history, etc)
Is that all doable?
This is part one of the app
This post was edited on 1/10/21 at 10:05 pm
Posted on 1/10/21 at 10:30 pm to Kujo
Well this doesn't sound sketchy at all.
Posted on 1/10/21 at 10:44 pm to Kujo
Packet Capture app might be what you are looking for.
Posted on 1/10/21 at 11:17 pm to SG_Geaux
Actually not at all..I don't have access to the data sent, and the app is designed for another purpose that the user knows, not hidden in terms and conditions.
Posted on 1/10/21 at 11:21 pm to Fat Batman
quote:
Packet Capture app
Not familiar but looking it up, I guess that is kind of what I'm looking for.
So the question, how do receivers validate data transmissions?
The one I worked with before, sent a feedback message for "received", so that the app doesn't continue to try to send the same information over and over again.
We had an issue with our API, that was causing roughly 14,000 transmissions to be sent to the tune of 4 million transmissions a day because the "received" wasn't being sent back
Posted on 1/10/21 at 11:56 pm to Kujo
quote:
2. Finds out where the app sends data
3. Determines the data 'column headers' if you will, is being sent (what info is being sent) (i.e. name, location, search history, etc)
Is this a privacy app to make data collection more transparent, because Apple is already doing something similar with the latest iOS which is pissing off companies like Facebook and Google.
quote:
Apple's new App Tracking and Transparency feature makes it easy for you to see all the data developers collect about you before you download an app.
LINK
Posted on 1/11/21 at 9:43 am to TigerinATL
No, I want to do something different.
The last part of my app is the "could you and would it be legal to" part of the app.
The last part of my app is the "could you and would it be legal to" part of the app.
Posted on 1/11/21 at 9:50 am to Kujo
quote:
So the question, how do receivers validate data transmissions?
The one I worked with before, sent a feedback message for "received" so that the app doesn't continue to try to send the same information over and over again.
The client sends a request to an API endpoint and the API endpoint should respond back. If everything goes fine you get a 200 response, likely with a payload of some sort containing the information you requested or containing a human-readable message for the client like 'success'. If the server received the request and there is an error, like you aren't authenticated, you will get the corresponding code for that error and likely a human-readable message to accompany that error. If there is a client error, like no internet connection, you should handle that on the client side. If no response is sent back to the client the request will hang for a while waiting, but should eventually time-out.
quote:
We had an issue with our API, that was causing roughly 14,000 transmissions to be sent to the tune of 4 million transmissions a day because the "received" wasn't being sent back
I would probably set this up so that a reattempt is only made based on feedback from the server and be sure your server is sending proper feedback. For instance, a 200 OK response, no reattempt. A 401 not authorized response, no reattempt. A 408 request timeout response, try to send the request again.
Posted on 1/11/21 at 10:15 am to Fat Batman
Is part of that validation that it was in response to a query?
Like if the app collects location data, is it.
Ie. (qwe4562edr768) Where are you ? I am here. qwe4562edr768 Validated.
Or.
I am here. Validated.I am here. Validated.I am here. Validated.
In your experience does the API validate based on a certain prescribed algorithm. Like I want location data every 30 seconds so I send a query asking where the user is, and then I expect a response with that query? How does the app know how often to send location data?
Like if the app collects location data, is it.
Ie. (qwe4562edr768) Where are you ? I am here. qwe4562edr768 Validated.
Or.
I am here. Validated.I am here. Validated.I am here. Validated.
In your experience does the API validate based on a certain prescribed algorithm. Like I want location data every 30 seconds so I send a query asking where the user is, and then I expect a response with that query? How does the app know how often to send location data?
This post was edited on 1/11/21 at 10:23 am
Posted on 1/11/21 at 11:26 am to Kujo
Typical APIs are one way. The client sends a message to the server and the server responds. You can open up two way communication by using something like Socket.io.
An easier way to do this is to have the app send the info to the server, not the other way around. How does the app know when to send the data? Easy, because you programmed it to send a request to the server with it's location every X amount of time.
This would be a lot easier if you just stated what you want to accomplish so those in the know could provide input on how to accomplish that instead of you asking abstract questions trying to logic it yourself. Trust me, no one is going to steal your idea until you are successful with it and by that time your idea is already out there for all to copy.
quote:
In your experience does the API validate based on a certain prescribed algorithm. Like I want location data every 30 seconds so I send a query asking where the user is, and then I expect a response with that query? How does the app know how often to send location data?
An easier way to do this is to have the app send the info to the server, not the other way around. How does the app know when to send the data? Easy, because you programmed it to send a request to the server with it's location every X amount of time.
This would be a lot easier if you just stated what you want to accomplish so those in the know could provide input on how to accomplish that instead of you asking abstract questions trying to logic it yourself. Trust me, no one is going to steal your idea until you are successful with it and by that time your idea is already out there for all to copy.
This post was edited on 1/11/21 at 3:50 pm
Posted on 1/11/21 at 11:44 am to Fat Batman
(no message)
This post was edited on 1/11/21 at 1:07 pm
Posted on 1/11/21 at 1:00 pm to Kujo
Seems like that would really mess up your ability to use any apps.
Posted on 1/11/21 at 1:09 pm to Fat Batman
Maybe a couple mapping apps, which my app would work to tweak permissions.
Like if it's a map app, location data is accurate.
If it's a game app like Candy crush, then it's not
It would start with the top 20 apps, then add more, then add more.
I see it as an evolution of the ad blocker app that so many people decided to use.
Is it doable? I assume that mac addresses are used to validate, otherwise could I just send data directly to their API?
Like if it's a map app, location data is accurate.
If it's a game app like Candy crush, then it's not
It would start with the top 20 apps, then add more, then add more.
I see it as an evolution of the ad blocker app that so many people decided to use.
Is it doable? I assume that mac addresses are used to validate, otherwise could I just send data directly to their API?
This post was edited on 1/11/21 at 1:24 pm
Posted on 1/11/21 at 3:48 pm to Kujo
quote:
I assume that mac addresses are used to validate, otherwise could I just send data directly to their API?
Protected APIs authenticate with things like cookies/sessions, JSON web tokens (JWT) and other forms of creating a "key" that can be stored on the client and sent to the server. The server checks the validity of the session, JWT, or whatever key that was sent by the client and allows/denies access based on if it passes the test.
I wouldn't be worried about Candy Crush sending your location to the server. Is that a thing? The bigger problem with your app is going to be determining when using a "location" app like say Google Maps, when to allow location data be sent and when to scramble it. In short sure, you could write an app that intercepts requests and changes the payload. It would likely be specific to each app and depending on how you implement it may be an expensive app to run (commands a lot of resources), which does not bode well for a phone app.
Posted on 1/11/21 at 5:10 pm to Fat Batman
I imagine that once I have the data and frequency each app commands...candy crush, airbnb, lyft, door dash, twitter, etc.
That I can streamline the interference. (Everyone who uses these common apps would have the exact same type of interference)
I could have it run while on Wi-Fi and plugged in. The idea is to corrupt, as you can't completely hide. Erroneous data calls in the question all data.
I'll get an ad for diapers still, but also an ad for bowling balls, Opera, PETA, private schools in Massachusetts, hunting rifles.
Advertisers will then be less likely to pay them, as their ad results would not lead to sales.
That I can streamline the interference. (Everyone who uses these common apps would have the exact same type of interference)
I could have it run while on Wi-Fi and plugged in. The idea is to corrupt, as you can't completely hide. Erroneous data calls in the question all data.
I'll get an ad for diapers still, but also an ad for bowling balls, Opera, PETA, private schools in Massachusetts, hunting rifles.
Advertisers will then be less likely to pay them, as their ad results would not lead to sales.
This post was edited on 1/11/21 at 5:14 pm
Posted on 1/12/21 at 7:11 am to Kujo
I would start by using something like Packet Capture and collecting request to establish a valid sample size. Then look at the request body (payload to the server) and see if you can logic an algorithm from there that accomplishes what you want keeping in mind the user needs to be able to still use the app.
Posted on 1/12/21 at 9:08 am to Kujo
Sounds like you're trying to set up a man-in-the-middle attack. I believe the only way this has a chance of working is if whoever installs this app trusts YOU with all of their data. Also some apps (most that use very private data) use certificate pinning (they don't trust the device's cert) so this attack won't work.
The goal is to have non-targeted ads delivered by spoofing location or other data on a per-app basis? Most probably impossible. You'll be fighting against a multi-hundred-billion dollar industry which spends unimaginable resources to get targeted ads right.
You can spoof device location such that all apps get it wrong. I'm not sure if your app can toggle spoofing on and off automatically depending on the active app, but regardless I doubt this will do much to impact targeted ads.
The goal is to have non-targeted ads delivered by spoofing location or other data on a per-app basis? Most probably impossible. You'll be fighting against a multi-hundred-billion dollar industry which spends unimaginable resources to get targeted ads right.
You can spoof device location such that all apps get it wrong. I'm not sure if your app can toggle spoofing on and off automatically depending on the active app, but regardless I doubt this will do much to impact targeted ads.
Popular
Back to top
