A 45 minute Intro to Digital Hygiene through Investigation

[how]

Continuing the discussion from TALER with journalists for journalists:

@XavCC

a 45-minute introduction to digital hygiene through investigation together, as follows (very briefly):

• Installing TALER via F-droid on an Android 9 device dedicated solely to testing
  • Static analysis / reverse engineering
    • Using Exodus Privacy to display the permissions and trackers of the TALER application.
    • Use of ClassyShark3xodus to display the TALER application manifest and go further in the discovery with verbosity of the results (and be able to send the information to a trusted person with skills).
  • With a computer on TALER app:
    • exodus-standalone: εxodus CLI client for local APK (file format used by the Android operating system) static analysis
    • apkcli: Command line tool gathering information on APKs based on androguard.

I would be interested in learning how to repeat this and take screenshots so we can observe the evolution of such tests.

• Taler Wallet permissions at Exodus Privacy

• ClassyShark3xodus - Scan apps for warnings | F-Droid - Free and Open Source Android App Repository

Is there a comparison with other ‘smartphone’ payment systems?