I'm curious if anyone in the infosec community has taken a look at the ICE tracking app AntiFreeze
-
I'm curious if anyone in the infosec community has taken a look at the ICE tracking app AntiFreeze
It's a JavaScript-only app that installs from its associated webpage. This was to get around Apple capitulating to [Redacted's] administration request to pull similar apps.
It's hosted in the Netherlands, to get around further takedown requests. The creator had this to say in the comments on the above linked article:
"AntiFreeze is a progressive web app. When you visit antifreeze.app in your browser, you'll see a landing page that explains what it does and walks you through how to add it to your home screen. That install process is just a built-in browser feature, the same 'Add to Home Screen' option that's been in Safari and Chrome for years. There's no APK, no file download, no executable. Once it's on your home screen, it opens in its own window and all the features become available: reporting, the map, the alert notifications. It's the same technology behind apps like Starbucks and Pinterest's mobile experiences.
As for whether it's a government honeypot: the app collects no personal data. No login, no email, no phone number, no account. It doesn't ask for your name or store your IP. You don't have to take my word for it. BorderReport, MSN, KTLA and NewsNation all covered the app independently. You can search those outlets by name and find the articles, or check antifreeze.app/press for the links."
-
R relay@relay.infosec.exchange shared this topic
