iPhone/iPod Touch/iPad applications using MillennialMediaAds

Why applications using MillennialMediaAds might be called Tracking Software or Spyware

As an introduction, please read our article on how we classify products for detection in Spybot.

Do MillennialMediaAds enabled apps really collect PII (personally identifiable information)?

Monitoring of traffic going out to MillennialMediaAds servers show for example that the UDID gets transmitted. An anonymized example:

Code:

---

GET /getAd.php5?medialets=false&sdkapid=17027&auid=1234567890123456789012345678901234567890&mmisdk=4.1.0-11.1.20.i&ua=iPhone%204.0&dv=4.0&dm=iPhone2,1&adtype=MMBannerAdTop&hswd=320&hsht=53&accelerometer=true&vendor=adwhirl HTTP/1.1
Host: ads.mp.mydas.mobi
User-Agent: MMSDK/4.1.0
User_agent: MMSDK/4.1.0
Accept: */*
Accept-Language: de-de
Accept-Encoding: gzip, deflate
Connection: keep-alive

---

Now lets take a look at Wikipedia on PII:

Quote:

---

Personally Identifiable Information (PII), as used in information security, refers to information that can be used to uniquely identify, contact, or locate a single person or can be used with other sources to uniquely identify a single individual.

---

Combined with other sources, e.g. legit data that relates the UDID to a user for example coming from a different case where the user consented to collection of his data, would allow AdWhirl to identify the user here.

This makes every application using MillennialMediaAds tracking software, with the classification changing to spyware if the customer is on informed about the use of MillennialMediaAds and the data MillennialMediaAds collects.