GoKawiilAYANEO
TL;DR AYANEO has confirmed that the 1,000+ screenshots were caused by a caching bug that will be fixed soon.
High data usage reports were a tracking error caused by the AYAWindow app sharing a UID with the Android system. We independently confirm the shared UID.
Further, our independent security analysis found no evidence of nefarious data transmission or of private information being shared.
Just yesterday, we reported on a user accusing AYANEO of spying on them on their Pocket DS after finding over 1,000 screenshots and excessive data usage. The GitHub thread eventually received a technical response that explained some of the findings. We can now confirm that the response was from AYANEO itself. Further, we can also independently confirm what the app is doing, and thankfully, it’s not nefarious.
Don’t want to miss the best from Android Authority? Set us as a favorite source in Google Discover to never miss our latest exclusive reports, expert analysis, and much more.
to never miss our latest exclusive reports, expert analysis, and much more. You can also set us as a preferred source in Google Search by clicking the button below.
Starting off, AYANEO responded to our email with the same comment as seen on GitHub: Thanks for looking into this and raising the concern. We appreciate privacy-conscious users. About the screenshots: DS has a dual-screen task manager feature that needs to render app thumbnails from the system. This is normal behavior. However, there’s a bug – the cache isn’t being cleaned up, causing screenshots to accumulate. Our team has identified this issue and will push a fix soon. About privacy: These images are small and stored in the app sandbox, posing no security risk AYA does NOT upload any of this data About the data traffic: Android calculates traffic by Linux UID. AYAWindow uses the system UID (android.uid.system), so all traffic from apps sharing this UID gets counted together. You can check other apps with the same UID (like “Phone” in Settings) – they’ll show similar traffic. This is actually total device usage, not just AYAWindow. I will share further information with you once it becomes available. The response does not have any new information, beyond implicitly confirming that the GitHub comment was from an AYANEO employee.
Independently, mobile security researcher linuxct confirmed to us that the AYAWindow app does indeed share the UID with the system.
This corroborates AYANEO’s claim on shared UID.
... continue reading