Ge0rG on Nostr: Minor #SecurityIncident with #GooglePlay developer console? Check your android app QA ...
Minor #SecurityIncident with #GooglePlay developer console? Check your android app QA accounts!
Test account created exclusively for Google to test my #xmpp app comes online from #DigitalOcean VPS (instead of the usual #Google IP), asks me if I like drugs.
VPS smells like a honeypot or hacked, running Squid 3.5.20 (from 2016) on a bunch of ports.
Escalated to Google Play developer support.
Published at
2023-11-16 12:38:59Event JSON
{
"id": "0811f3b1cc24aecfbad2803c31fe01d818613f76ffd41177807aa7edda7c8914",
"pubkey": "5877dfa3748424b003c3ecf0c6d9fb3ddcda0a8b86bcb45435d0fa092cc873c0",
"created_at": 1700138339,
"kind": 1,
"tags": [
[
"t",
"securityincident"
],
[
"t",
"googleplay"
],
[
"t",
"xmpp"
],
[
"t",
"digitalocean"
],
[
"t",
"google"
],
[
"proxy",
"https://chaos.social/users/ge0rg/statuses/111420266185179488",
"activitypub"
]
],
"content": "Minor #SecurityIncident with #GooglePlay developer console? Check your android app QA accounts!\n\nTest account created exclusively for Google to test my #xmpp app comes online from #DigitalOcean VPS (instead of the usual #Google IP), asks me if I like drugs. \n\nVPS smells like a honeypot or hacked, running Squid 3.5.20 (from 2016) on a bunch of ports.\n\nEscalated to Google Play developer support.\n\nhttps://assets.chaos.social/media_attachments/files/111/420/241/883/996/239/original/c11467021037bce7.png\n\nhttps://assets.chaos.social/media_attachments/files/111/420/260/577/798/110/original/ccd20af436004d32.png",
"sig": "2e1c3b70058bad21692beeccce22fc09e2fc7997efa495244a4800697e80a262bfad63e822487e7145be0f4125c53c8586037a08718be622b8a19bd656e92ce4"
}
