Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Initial implementation #1

Merged
merged 39 commits into from
Jun 23, 2024
Merged
Changes from 1 commit
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
2ee7020
Import har2pdf code
baltpeter Dec 5, 2023
164666a
har2pdf: Shift all headings down by one
baltpeter Dec 7, 2023
a51e642
har2pdf: Make heading referencable
baltpeter Dec 7, 2023
8338504
First somewhat working prototype
baltpeter Dec 7, 2023
6083f6a
Description
baltpeter Dec 7, 2023
5eeedac
Only print requests referenced in the report
baltpeter Dec 7, 2023
6ba8233
Reference tracker-wiki in report
baltpeter Dec 11, 2023
3fad5cb
Escaping
baltpeter Dec 11, 2023
edc1841
Outsource style to external file
baltpeter Dec 11, 2023
2200ecb
Controller notices
baltpeter Dec 11, 2023
74c242a
Complaints
baltpeter Mar 15, 2024
61d3b6a
delete unused translations file
baltpeter Mar 25, 2024
cd0744c
Fixes #5: Render App Privacy Report/TrackerControl export
baltpeter Apr 5, 2024
e523af3
Refactor GenerateOptions
baltpeter Apr 9, 2024
2298c31
Mention app version in second analysis in complaint
baltpeter Apr 9, 2024
e9e5247
Complaint: Only include requests from user's network activity report
baltpeter Apr 9, 2024
c449f24
Rename to ReportHAR
baltpeter Apr 19, 2024
738ccd1
Factor out traffic preparation
baltpeter Apr 19, 2024
08d51bd
Factor out Nunjucks code
baltpeter Apr 19, 2024
0e8c2ab
Factor out Typst compilation
baltpeter Apr 19, 2024
4279107
har2pdf: fix typo in encoding detection
baltpeter Apr 25, 2024
2c81ae1
extract meta from tweasel HARs
baltpeter Apr 25, 2024
23a32b8
Allow passing harMd5
baltpeter May 10, 2024
c21d5e2
Write docstrings
baltpeter May 10, 2024
2571959
write readme
baltpeter May 13, 2024
e433630
Fixes #4: Include software versions in report
baltpeter May 13, 2024
3fccba5
Add link to HAR tutorial
baltpeter May 14, 2024
17010c2
Export prepareTraffic()
baltpeter Jun 3, 2024
a72d119
Vendor TweaselHar type
baltpeter Jun 4, 2024
9c3efa3
Upgrade Parcel
baltpeter Jun 4, 2024
9a58010
Switch to our custom nunjucks fork
baltpeter Jun 4, 2024
a06820f
Inline TrackHAR translations in bundle
baltpeter Jun 4, 2024
a41a558
Export translations
baltpeter Jun 10, 2024
acddc3e
Support TrackerControl individual app exports
baltpeter Jun 11, 2024
a50275d
Switch to released TrackHAR
baltpeter Jun 11, 2024
86fdb94
Template for informal complaints
baltpeter Jun 11, 2024
acc5eaf
Actually convince Parcel to inline the translations and templates
baltpeter Jun 14, 2024
fe4707c
Remove yalc and update TrackHAR
zner0L Jun 18, 2024
d711453
Add method section to report
zner0L Jun 21, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Mention app version in second analysis in complaint
  • Loading branch information
baltpeter committed Apr 9, 2024
commit 2298c31caa306f1d7a88ceb9153b2b1eb69b9e31
2 changes: 1 addition & 1 deletion templates/en/complaint.typ
Original file line number Diff line number Diff line change
@@ -74,7 +74,7 @@ In the interest of avoiding unnecessary work for the data protection authorities

I am attaching my notice to the controller{% if complaintOptions.controllerResponse !== "none" %} as well as any communication I have received from them in this matter{% endif %} to the complaint.

On {{ analysis.date | dateFormat }}, and thus after the expiration of the voluntary grace period, I retested the app using the tweasel tools. Unfortunately, I had to find that the app still performs tracking in violation of the GDPR {% if complaintOptions.nationalEPrivacyLaw %} and {{ complaintOptions.nationalEPrivacyLaw }}{% endif %}.
On {{ analysis.date | dateFormat }}, and thus after the expiration of the voluntary grace period, I retested the app using the tweasel tools. The analysis was performed on version {{ analysis.app.version }} of the app, downloaded from the {{ analysis.app.store }}, running on {{ analysis.app.platform }} {{ analysis.platformVersion }}. Unfortunately, I had to find that the app still performs tracking in violation of the GDPR {% if complaintOptions.nationalEPrivacyLaw %} and {{ complaintOptions.nationalEPrivacyLaw }}{% endif %}.

To verify that the tracking also affects me, I used the {% if analysis.app.platform === 'Android' %}the "TrackerControl" app#footnote[https://trackercontrol.org/#network-traffic-analysis]{% elif analysis.app.platform === 'iOS' %}the "App Privacy Report" feature#footnote[https://support.apple.com/en-gb/HT212958]{% endif %} on my personal {{ analysis.app.platform }} device. This confirmed that the app also contacts those tracking servers on my own device.#footnote[Recording a phone's network traffic requires rooting the device and making severe configuration changes. Doing this is not feasible or advised for devices that are in actual day-to-day use. That is why the tweasel project provides public infrastructure for doing such testing on devices/emulators that are only used for this purpose. However, logging a list of DNS hostnames contacted by an app is possible without such severe procedures {% if analysis.app.platform === 'Android' %}by installing the "TrackerControl" app{% elif analysis.app.platform === 'iOS' %}using the "App Privacy Report" feature integrated directly into iOS{% endif %}.\
\