You Should Know
YSK - for all the things that can make your life easier!
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
Rules (interactive)
Rule 1- All posts must begin with YSK.
All posts must begin with YSK. If you're a Mastodon user, then include YSK after @youshouldknow. This is a community to share tips and tricks that will help you improve your life.
Rule 2- Your post body text must include the reason "Why" YSK:
**In your post's text body, you must include the reason "Why" YSK: It’s helpful for readability, and informs readers about the importance of the content. **
Rule 3- Do not seek mental, medical and professional help here.
Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.
Rule 4- No self promotion or upvote-farming of any kind.
That's it.
Rule 5- No baiting or sealioning or promoting an agenda.
Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.
Rule 6- Regarding non-YSK posts.
Provided it is about the community itself, you may post non-YSK posts using the [META] tag on your post title.
Rule 7- You can't harass or disturb other members.
If you harass or discriminate against any individual member, you will be removed.
If you are a member, sympathizer or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people and you were provably vocal about your hate, then you will be banned on sight.
For further explanation, clarification and feedback about this rule, you may follow this link.
Rule 8- All comments should try to stay relevant to their parent content.
Rule 9- Reposts from other platforms are not allowed.
Let everyone have their own content.
Rule 10- The majority of bots aren't allowed to participate here.
Unless included in our Whitelist for Bots, your bot will not be allowed to participate in this community. To have your bot whitelisted, please contact the moderators for a short review.
Rule 11- Posts must actually be true: Disiniformation, trolling, and being misleading will not be tolerated. Repeated or egregious attempts will earn you a ban. This also applies to filing reports: If you continually file false reports YOU WILL BE BANNED! We can see who reports what, and shenanigans will not be tolerated.
Partnered Communities:
You can view our partnered communities list by following this link. To partner with our community and be included, you are free to message the moderators or comment on a pinned post.
Community Moderation
For inquiry on becoming a moderator of this community, you may comment on the pinned post of the time, or simply shoot a message to the current moderators.
Credits
Our icon(masterpiece) was made by @clen15!
view the rest of the comments
This is the sort of app that really needs to be open source or at least open dataset. Right now there's no way to see if their data is reliable. Aurora Store tells me that app has tracking in it (minor, but still, ewww), which is also concerning, so I'm not going to install it to find out if that information is at least provided in-app.
Oh also it's developed by this super generic-looking company BashSquare. Overall not very confidence-inspiring.
I don't know anything about BashSquare, but the developer is Ahmed Bashbash, a Palestinian software engineer from Gaza residing in Hungary.
Here's the About page:
collapsed inline media
As far as what's on the boycott list, it follows the official boycott list from my knowledge and gives an explanation on why a brand is boycotted
collapsed inline media
It works without camera access if you have no need to scan barcodes, it does need network to access the boycott list information. It doesn't need notification or sensor access to work. At least on grapheneos
That's quite compelling but I still can't find any official confirmation of that information. The BashSquare website doesn't mention any employees but does mention the app (and their website is on the G Play store). IMO the information you've provided is enough to confirm it uses some of the public boycott list, but could still be omitting things (though very unlikely; that would be a wild Israeli misinformation campaign).
The boycott website doesn't provide barcode prefixes for companies to boycott, which means there is still some information that isn't verifiable, and it's one of the more crucial parts of the app's functionality (if you're not scanning barcodes you could just use the website). I did manage to find a way to look up barcode prefixes but there was no mention of a public API so it makes me think that either they're part of the app (see qualms about open/verifiable dataset) or the app is using some proprietary API/scraper to get that info.
Thanks for the info!
It looks like he's the founder of BashSquare from his profiles, I found his website. https://ahmedbashbash.github.io/ Looks like it has contact information, you could possibly ask clarifying questions if you wanted to.
I'm pretty certain it's not some kind of Israeli honeypot or something like that. They've also done a few donation drives in the past.
The barcodes themselves provide the information for the business the product is from, at least most of them. There is also community input, where people can request a product be added if it is on the boycott list but they find the barcode not identifying it. They are also working on community additions to alternative products to boycotted ones, that should roll out in a future update
I know grapheneos does sandboxing which is really nice. You can also further isolate by setting up a new profile or using the private space, depending on what your threat level is. I just have it on my regular profile myself
You can't trust those "app has tracking in it" flags because they usually have scary wording for extremely basic and normal things that wouldn't impact your privacy.
An app anonymously tracks if an user clicks a button or not. This becomes "ThIs APp pHOnEs HomE tRaCkiNg uSErS"
I'd be inclined to agree if it wasn't broken down into more detail than what I actually shared. The app includes ads and one of the trackers is Google AdMob, so that's definitely not anonymous tracking. It's also impossible* to be sure whether the other two trackers, Google Crashlytics and Firebase Analytics, are anonymous.
*without reading the source code, at least
Edit to add the report that Aurora Store used
The ads are not present in the app unless you voluntarily watch one in the Support tab by clicking 'Watch Ad'
Unfortunately that has no bearing on whether the tracking is active
That is not normal and I absolutely object to it! Fuck anybody who wants to normalize that.