58
13

YSK: The bitwarden android app contains google and microsoft trackers

1y 5mon ago by discuss.tchncs.de/u/isolatedscotch in bitwarden@discuss.tchncs.de from github.com

You can download it from F-Droid or use the F-Droid release flavour when downloading from github, but IMO they should be removed from all releases

My fdroid version also syncs, then why use firebase for pushing notifications?

you are right, but you'd think a privacy focused open source password manager wouldn't connect to big corps in the background

6 years old bug report?

Still valid tho (although exodus doesn't report google trackers on it for some reason, it still connects to firebase)

Seems like that bug report is out of date now, the url they link to only has a Microsoft crash reporting tool:

https://reports.exodus-privacy.eu.org/en/reports/com.x8bit.bitwarden/latest/

I searched fdroid and didn't find it.

Get this warning 1000009987

That's F-Droid's generic warning about third party stuff. It's Bitwarden's repo, not F-Droid's.

https://mobileapp.bitwarden.com/

They host their own F-Droid repo

Somewhat adjacent, but this doesn't surpise me since when watching network traffic from "private" or "analytics-removed" forks of FOSS projects they still tend to ping a dozen servers on start up. Not saying all, Keepass for instance is a good example

I use Bitwarden app from their f-droid repo. I also use Rethink DNS app that manages all the DNS queries. I have never seen it connect to any Google or Firebase domains. But, I host my own Vaultwarden, maybe that's why?

You could at least have read the 2nd comment on the issue, the f-droid app has no crash reporting and does not use Google Firebase for sync updates.