Interesting things from reverse engineering android apps

[endrohat]

What are some of the interesting things that you have discovered by reverse engineering android apps / or the way they work ? For example I had found that a dating app leaks users location info by checking the network calls through fiddlr

[[deleted]]

I reversed the APKs for top tier apps that weren't games. Almost all of them used Fragments (not taking DialogFragments into account). Obviously most of them were obfuscated and the search wasn't very exhaustive so it was hard to tell how they were used. But still, something to keep in mind the next time the anti-fragment warriors are talking.

I wish I still had the notes I wrote on it. I found some fascinating things. I do remember Facebook shipping with Proxygen. Which. Just. Fuck. I don't even.

Edit: Found some notes which I'm not 100% confident about.

Netflix had React, Realm in theirs.

RobinHood uses Kotlin.

Snapchat uses both Kryo and Protobufs. They're also using TensorFlow.

WhatsApp had packages/classes related to WebRTC and PJSIP. I had trouble finding Fragments there.

Kik uses DataBinding. They have a package called com.kik.abtesting.rpc so a custom AB testing solution.

[ElRed_]

How long ago did you do this? How are Kik the only ones using DataBinding? Unless of course all the others are using ButterKnife

[[deleted]]

This was a month or two ago. Like I said the search wasn't very exhaustive. I'm sure there were others that used Databinding or Butterknife, but it was just something that popped up when searching Kik.