haneul/appfence_frameworks_base — Issue #1: Shadow IMEI does not use original device ID in hash
Author: pjh
Created: 2011-10-25 00:00:42+00:00
State: open

In frameworks/base/core/java/android/privacy/IMEIAnonymizer.java, the IMEIAnonymizer class is supposed to hash the true IMEI with the application name to produce a shadow IMEI number (consistent for each application, but different across applications). However, the code currently uses a hard-coded value of "1234567890" as the true IMEI, rather than getting it from the device. This is a remnant of our testing and evaluation (because we wanted the IMEI to be the same across all of the phones that we were using for testing); the code should be updated to get the real device ID before hashing.