- Security Notification - - webviewclient

Security Notification - Your app is using an unsafe implementation of the WebViewClient.onReceivedSslError handler. Please visit the Google Customer Center Help for more details, such as the time of the vulnerability resolution. Vulnerable class: Org.mospi.moml.framework.pub.ui.MOMLWebViewClient Affects version 7 of the APK.

Related

Gmail SMTP plugin for wordpress/woocommerce

I am trying to make Gmail SMTP puligin work with my woocommerce/wordpress site.
I'm having this notice from Google Cloud:
Verification Status
Pending developer action
Complete all actions below. Update your email thread with our Trust and Safety team after you have completed an action. The Trust and Safety team will continue the verification process once all actions are completed. Learn more
Action Required
Comply with domain verification requirements
Ensure your application's domains have completed the Search Console verification process
Update brand information
Ensure that your app's name, logo, and OAuth clients meet all requirements
I asked about this from Google and they gave me this answer:
Thanks for your patience while we reviewed your project.
Since your app is a Gmail SMTP plug-in for Wordpress, and you or the site admin are the only users of the app, we recommend that you keep using your app with the “unverified app” screen. The Gmail API isn't for public use in this case, so you do not need to get verified.
If you are having issues activating the plugin, you can see all your support options in General Support.
Please note that Google also participates in community discussion groups and mailing lists that can help you find answers or troubleshoot problems.
We strongly recommend that you submit a question via any of the below third-party community discussion groups and/or mailing lists:
Stack Overflow - A question and answer site for programmers.
Server Fault - A question and answer site for deploying and managing IT platforms.
Google Developers - Issue tracking for features and bugs. Search existing issues before creating a new one.
Google Groups - A place for non-technical how-to questions.
google-app-engine
gce-discussion
kubernetes-users
google-cloud-bigtable-discuss
google-cloud-sql-discuss
gcd-discuss
cloud-dns-discuss
cloud-dataproc-discuss
cloud-pubsub-discuss
cloud-nl-discuss
cloud-speech-discuss
google-translate-api
cloud-videointel-discuss
cloud-vision-discuss
google-cloud-dev
google-stackdriver-discussion
Android-developers
I can't use this app without Google approval. I tried to send a test email and the plugin gave me this error/answer:
Gmail SMTP plugin cannot send email until you enter your credentials in the settings and grant access to your web application.
So how can I make Gmail SMTP work with my wordpress/woocommerce site?
Best Regards,
Tuomo Nurkkala
I think I tried everything and I asked from Google about this problem, but I'm not so sure if I understood their message correctly.
Best Regards,
Tuomo Nurkkala

Is the LinkedIn Compliance API still accessible?

I have been looking into de LinkedIn Compliance API, since our goal is to:
Allow users to send connection requests / "invitations"
Send chat messages to existing connections
Get the conversation history with a connection
But, as it seems, the API could be closed for new connections... While it is not mentioned in the docs of the Compliance API itself, or in its changelog, it is said to be "closed" on this page. Also, when trying to start a new application integration within the LinkedIn developer platform, it is not listed as an option.
So my question is twofold:
Is it still possible to connection to the LinkedIn Compliance API? (after being authorized, of course)
If not: could above three aims be achieved through another API? I have been browsing many of the docs, but was not able to find a substitute LinkedIn solution yet.

Firebase Ads is not showing

Apps removed from Google play store due cause of Violation of Usage of Android Advertising ID.
After submitting privacy policy apps is now available in play store but no ads is shown . I have used google firebase adMob network. I have tested with with TEST_BANNER_ID, it's works good but live banner ad Unit ID does not work. If someone would help or give me suggestion how to solve the problem.
Apps removed and real ads is not serving into apps
Causes and procedure to apply:
When your apps has been removed from android play store for policy violation and you got a mail or notification . After while you have made changes to your apps in order to comply android apps policy and resubmitted the apps into play store , Google will check the apps changes . If it supports their privacy policy properly and you submit an application with proper justification , Then google will republished your apps and available again to the users .
I changed my apps accordingly to the google apps privacy policy and resubmitted the apps into play store. Google accepted my apps to re-publish and available to google play store. But advertising serving was not available from Admob . So I was worried and applied to re-enable ads serving . It has takes some days to re-serving ads into apps and admob informed me for the great news!

Security alert for insecure TrustManager

In one of my apps I recently got the following alert from Google Play saying:
Your app is using an unsafe implementation of the X509TrustManager interface with an Apache HTTP client, resulting in a security vulnerability. Please see this Google Help Center article for details, including the deadline for fixing the vulnerability.
Can someone provide more details on what should be updated?

Google Analytics Mobile SDK "request for permission" requirement

The Google Analytics Plugin for PhoneGap has an example app that contains the following code:
// Note: A request for permission is REQUIRED by google. You probably want to do this just once, though, and remember the answer for subsequent runs.
navigator.notification.confirm('GA_PLUGIN would like your permission to collect usage data. No personal or user identifiable data will be collected.', permissionCallback, 'Attention', 'Allow,Deny');
I've looked through the Google Analytics mobile SDK docs (although I have not read them start-to-finish) and have been unable to locate this requirement. I also don't see it in the Terms of Service at http://www.google.com/analytics/terms/us.html.
I don't mind requesting permission from the end user, but I certainly don't do it on web sites and I don't seem to recall getting many of these requests within apps that I've installed either.
Is the comment in the code correct?
Found it! Sort of. It's in the Measurement Protocol / SDK Policy doc. It states:
You will give your end users proper notice about the implementations and features of Google Analytics you use (e.g. notice about what data you will collect via Google Analytics, and whether this data can be connected to other data you have about the end user). You will either get consent from your end users, or provide them with the opportunity to opt-out from the implementations and features you use.
That's the Measurement Protocol / SDK Policy. It's not 100% clear to me that it refers to the iOS and Android SDKs. On the one hand, the table of contents type thing on the left has it under Measurement Protocol > Resources. The iOS and Android SDKs are outside of Measurement Protocol. So that suggests it doesn't apply to the iOS and Android SDKs. On the other hand, the Measurement Protocol doesn't seem to have an SDK associated with it, so that the suggests that "SDK" in the title may be referring to the iOS and Android SDKs.
I do wish this were clearer.

Resources