Moderate Risk

Threat level

info.nightscout.nsclient2

NSClient2

Analyzed on 2022-04-06T21:35:40.802815

31

permissions

43

activities

25

services

16

receivers

21

domains

File sums

MD5 c31f8b7c169d8b22015916785074dd86
SHA1 a16ee4262f220b02c70458f7cc0c8c6e1344e0ca
SHA256 c262eae221c0ac7dc00fc907e4d6f88df6c47af86071928119130e38dbee352c
Size 46.61MB

APKiD

Information computed with APKiD.

/tmp/tmp5cyp7pfr
anti_vm
  • possible VM check
/tmp/tmp5cyp7pfr!classes.dex
yara_issue
  • yara issue - dex file recognized by apkid but not yara module
anti_vm
  • Build.FINGERPRINT check
  • Build.MANUFACTURER check
  • Build.TAGS check
compiler
  • unknown (please file detection issue!)
/tmp/tmp5cyp7pfr!classes2.dex
yara_issue
  • yara issue - dex file recognized by apkid but not yara module
anti_vm
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • Build.TAGS check
  • possible ro.secure check
  • possible VM check
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • unknown (please file detection issue!)
/tmp/tmp5cyp7pfr!classes3.dex
yara_issue
  • yara issue - dex file recognized by apkid but not yara module
anti_vm
  • Build.MANUFACTURER check
compiler
  • unknown (please file detection issue!)
/tmp/tmp5cyp7pfr!classes4.dex
yara_issue
  • yara issue - dex file recognized by apkid but not yara module
anti_vm
  • Build.MANUFACTURER check
compiler
  • unknown (please file detection issue!)
/tmp/tmp5cyp7pfr!classes5.dex
yara_issue
  • yara issue - dex file recognized by apkid but not yara module
compiler
  • unknown (please file detection issue!)

SSdeep

Information computed with ssdeep.

APK file 786432:+WkD0zLJFLl6R1UUlM3Z0Z2EOv9vg9Q+UfjLDj2RybXmL+pIUHR+yY0pCnm:nkDED3gybXmL+7Cnm
Manifest 768:vdeq4RxcKE6X1SbqUQtoTYo9OegLtPpRtetybUAavJORlMngJyacKx9owCpfsl+T:…
classes.dex 98304:wqzXWaEz6RqrexZBZCk6WPK62d8Ee3sk2EOv9vg9Q+UfjuCpn:RzGaEPixHYk2E…
classes2.dex 196608:3jogat42ExkRybXmL+4junVrRFM9OLcUHR+yYy:3jw+2nRybXmL+4jun9RFM0I…
classes3.dex 98304:FBkclDnGqCkVGcgSP3NHRe3FY/m2aJR1UUlMr:FBZlGqnT9V4JR1UUlMr
classes4.dex 196608:AgS7Yry73xp8XSoIIDpydZ5zLJFoCLPWeX:xc3xpthIDpezLJF1
classes5.dex 49152:9hq7MntQ8kjLQ8Ej3+TjsLUwXlXmhhIMld:9hq7ItX0R

Dexofuzzy

Information computed with Dexofuzzy.

classes.dex None
classes2.dex None
classes3.dex None
classes4.dex None
classes5.dex None

APK details

Information computed with AndroGuard and Pithus.

Package info.nightscout.nsclient2
App name NSClient2
Version name 3.0.0.1-nsclient
Version code 1500
SDK 28 - 28
UAID 1865789f9aaa0a231d9ce4ef3d6853e8ddda92a0
Signature Signature V2
Frosting Not frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0x504b4453: Dependency metadata
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 96f33e4b1af86c51916b7f2bcbfbb82d
SHA1 8ea60089f3ace40d8371dc055f0aacef48a204ce
SHA256 40d295c2aae2714ef901c4c39fac1360099eb76cfbeba1c7811578f83ae2da22
Issuer Organization: Nightscout contributors
Not before 2014-05-28T05:45:55+00:00
Not after 2039-05-22T05:45:55+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. META-INF/services/kotlin.reflect.jvm.internal.impl.builtins.BuiltInsLoader

Manifest analysis

Information computed with MobSF.

Medium Application Data can be Backed up[android:allowBackup=true]
This flag allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device.
High Activity (com.google.firebase.auth.internal.FederatedSignInActivity) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.firebase.auth.api.gms.permission.LAUNCH_FEDERATED_SIGN_IN [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (info.nightscout.androidaps.receivers.DataReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (info.nightscout.androidaps.receivers.SmsReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.BROADCAST_SMS [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (info.nightscout.androidaps.receivers.AutoStartReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (info.nightscout.androidaps.plugins.general.wear.wearintegration.WatchUpdaterService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (info.nightscout.androidaps.plugins.general.nsclient.services.NSClientService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (info.nightscout.androidaps.services.AlarmSoundService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (info.nightscout.androidaps.plugins.general.smsCommunicator.activities.SmsCommunicatorOtpActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (info.nightscout.androidaps.danars.activities.BLEScanActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Service (info.nightscout.androidaps.plugins.pump.omnipod.eros.rileylink.service.RileyLinkOmnipodService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (info.nightscout.androidaps.plugins.pump.common.dialog.RileyLinkBLEConfigActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (info.nightscout.androidaps.diaconn.activities.DiaconnG8BLEScanActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (info.nightscout.androidaps.plugin.general.openhumans.ui.OHLoginActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (androidx.work.impl.background.systemjob.SystemJobService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.DUMP [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.

Browsable activities

Information computed with MobSF.

info.nightscout.androidaps.plugin.general.openhumans.ui.OHLoginActivity

Hosts: setup-openhumans

Schemes: androidaps://

Main Activity

Information computed with AndroGuard.

info.nightscout.androidaps.MainActivity

Activities

Information computed with AndroGuard.

info.nightscout.androidaps.MainActivity
info.nightscout.androidaps.activities.PreferencesActivity
info.nightscout.androidaps.plugins.general.overview.activities.QuickWizardListActivity
info.nightscout.androidaps.plugins.general.maintenance.activities.PrefImportListActivity
info.nightscout.androidaps.activities.HistoryBrowseActivity
info.nightscout.androidaps.activities.TreatmentsActivity
info.nightscout.androidaps.activities.SurveyActivity
info.nightscout.androidaps.activities.ProfileHelperActivity
info.nightscout.androidaps.activities.StatsActivity
com.google.firebase.auth.internal.FederatedSignInActivity
info.nightscout.androidaps.setupwizard.SetupWizardActivity
info.nightscout.androidaps.activities.SingleFragmentActivity
info.nightscout.androidaps.plugins.general.maintenance.activities.LogSettingActivity
info.nightscout.androidaps.activities.RequestDexcomPermissionActivity
info.nightscout.androidaps.plugins.general.smsCommunicator.activities.SmsCommunicatorOtpActivity
info.nightscout.androidaps.danars.activities.BLEScanActivity
info.nightscout.androidaps.danars.activities.PairingHelperActivity
info.nightscout.androidaps.danars.activities.EnterPinActivity
info.nightscout.androidaps.dana.activities.DanaHistoryActivity
info.nightscout.androidaps.dana.activities.DanaUserOptionsActivity
info.nightscout.androidaps.plugins.pump.insight.activities.InsightPairingActivity
info.nightscout.androidaps.plugins.pump.insight.activities.InsightAlertActivity
info.nightscout.androidaps.plugins.pump.insight.activities.InsightPairingInformationActivity
info.nightscout.androidaps.plugins.pump.medtronic.dialog.MedtronicHistoryActivity
info.nightscout.androidaps.plugins.pump.omnipod.eros.ui.wizard.activation.ErosPodActivationWizardActivity
info.nightscout.androidaps.plugins.pump.omnipod.eros.ui.wizard.deactivation.ErosPodDeactivationWizardActivity
info.nightscout.androidaps.plugins.pump.omnipod.eros.ui.ErosPodManagementActivity
info.nightscout.androidaps.plugins.pump.omnipod.eros.ui.ErosPodHistoryActivity
info.nightscout.androidaps.plugins.pump.common.dialog.RileyLinkBLEConfigActivity
info.nightscout.androidaps.plugins.pump.common.hw.rileylink.dialog.RileyLinkStatusActivity
info.nightscout.androidaps.plugins.pump.omnipod.dash.ui.wizard.activation.DashPodActivationWizardActivity
info.nightscout.androidaps.plugins.pump.omnipod.dash.ui.wizard.deactivation.DashPodDeactivationWizardActivity
info.nightscout.androidaps.plugins.pump.omnipod.dash.ui.DashPodManagementActivity
info.nightscout.androidaps.plugins.pump.omnipod.dash.ui.DashPodHistoryActivity
info.nightscout.androidaps.diaconn.activities.DiaconnG8HistoryActivity
info.nightscout.androidaps.diaconn.activities.DiaconnG8UserOptionsActivity
info.nightscout.androidaps.diaconn.activities.DiaconnG8BLEScanActivity
info.nightscout.androidaps.plugin.general.openhumans.ui.OHLoginActivity
info.nightscout.androidaps.activities.TDDStatsActivity
info.nightscout.androidaps.activities.BolusProgressHelperActivity
info.nightscout.androidaps.activities.ErrorHelperActivity
dev.doubledot.doki.ui.DokiActivity
com.google.android.gms.common.api.GoogleApiActivity

Receivers

Information computed with AndroGuard.

info.nightscout.androidaps.receivers.DataReceiver
info.nightscout.androidaps.receivers.SmsReceiver
info.nightscout.androidaps.receivers.KeepAliveReceiver
info.nightscout.androidaps.plugins.aps.loop.CarbSuggestionReceiver
info.nightscout.androidaps.receivers.AutoStartReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Services

Information computed with AndroGuard.

info.nightscout.androidaps.plugins.general.wear.wearintegration.WatchUpdaterService
info.nightscout.androidaps.plugins.general.nsclient.services.NSClientService
info.nightscout.androidaps.services.AlarmSoundService
info.nightscout.androidaps.plugins.general.overview.notifications.DismissNotificationService
info.nightscout.androidaps.plugins.general.persistentNotification.DummyService
info.nightscout.androidaps.services.LocationService
info.nightscout.androidaps.danars.services.DanaRSService
info.nightscout.androidaps.danar.services.DanaRExecutionService
info.nightscout.androidaps.danaRKorean.services.DanaRKoreanExecutionService
info.nightscout.androidaps.danaRv2.services.DanaRv2ExecutionService
info.nightscout.androidaps.plugins.pump.insight.connection_service.InsightConnectionService
info.nightscout.androidaps.plugins.pump.insight.InsightAlertService
info.nightscout.androidaps.plugins.pump.medtronic.service.RileyLinkMedtronicService
info.nightscout.androidaps.plugins.pump.omnipod.eros.rileylink.service.RileyLinkOmnipodService
info.nightscout.androidaps.diaconn.service.DiaconnG8Service
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.messaging.FirebaseMessagingService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application invoke platform-provided DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application implement asymmetric key generation.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['location', 'bluetooth', 'network connectivity'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to no sensitive information repositories.
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(1) The application generate asymmetric cryptographic keys not in accordance with FCS_CKM.1.1(1) using key generation algorithm RSA schemes and cryptographic key sizes of 1024-bit or lower.
Cryptographic Asymmetric Key Generation
FCS_CKM.1.1(3)
FCS_CKM.1.2(3)
A password/passphrase shall perform [Password-based Key Derivation Functions] in accordance with a specified cryptographic algorithm..
Password Conditioning
FCS_COP.1.1(1) The application perform encryption/decryption not in accordance with FCS_COP.1.1(1), AES-ECB mode is being used.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_COP.1.1(3) The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Operation - Signing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update
FCS_CKM.1.1(2) The application shall generate symmetric cryptographic keys using a Random Bit Generator as specified in FCS_RBG_EXT.1 and specified cryptographic key sizes 128 bit or 256 bit.
Cryptographic Symmetric Key Generation

Code analysis

Information computed with MobSF.

Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 ch/qos/logback/classic/pattern/TargetLengthBasedClassNameAbbreviator.java
net/danlew/android/joda/ResUtils.java
ch/qos/logback/core/net/SocketConnectorBase.java
com/scottyab/rootbeer/util/QLog.java
org/mozilla/javascript/ScriptRuntime.java
ch/qos/logback/core/net/DefaultSocketConnector.java
org/mozilla/javascript/tools/idswitch/Main.java
info/nightscout/androidaps/plugins/general/nsclient/NSClientFragment.java
ch/qos/logback/core/spi/ContextAwareImpl.java
com/scottyab/rootbeer/RootBeerNative.java
ch/qos/logback/classic/spi/ThrowableProxy.java
org/mozilla/javascript/tools/jsc/Main.java
info/nightscout/androidaps/plugins/pump/common/utils/ByteUtil.java
com/j256/ormlite/logger/LocalLog.java
org/mozilla/javascript/tools/debugger/Dim.java
info/nightscout/androidaps/plugins/general/tidepool/TidepoolPlugin.java
org/mozilla/classfile/TypeInfo.java
ru/noties/markwon/LinkResolverDef.java
org/mozilla/javascript/Interpreter.java
ch/qos/logback/core/subst/Node.java
org/joda/time/tz/DateTimeZoneBuilder.java
com/j256/ormlite/android/AndroidLog.java
info/nightscout/androidaps/plugins/general/nsclient/NSClientPlugin.java
info/nightscout/androidaps/plugins/general/wear/wearintegration/WatchUpdaterService.java
com/thoughtworks/xstream/core/JVM.java
ch/qos/logback/core/recovery/ResilientOutputStreamBase.java
ch/qos/logback/core/joran/util/ConfigurationWatchListUtil.java
ch/qos/logback/core/spi/ContextAwareBase.java
info/nightscout/shared/logging/AAPSLoggerTest.java
com/jjoe64/graphview/Viewport.java
dagger/android/AndroidInjection.java
org/slf4j/helpers/Util.java
org/monkey/d/ruffy/ruffy/driver/display/Menu.java
info/nightscout/androidaps/plugins/general/wear/wearintegration/SendToDataLayerThread.java
com/jjoe64/graphview/helper/GraphViewXML.java
info/nightscout/androidaps/plugins/pump/omnipod/eros/ui/ErosPodManagementActivity.java
com/j256/ormlite/android/apptools/OrmLiteConfigUtil.java
ch/qos/logback/classic/android/LogcatAppender.java
com/scottyab/rootbeer/RootBeer.java
com/jjoe64/graphview/series/BarGraphSeries.java
net/glxn/qrgen/android/BmpUtil.java
net/danlew/android/joda/TimeZoneChangedReceiver.java
ch/qos/logback/classic/net/SimpleSocketServer.java
Medium
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 info/nightscout/androidaps/plugins/pump/omnipod/eros/driver/communication/action/AssignAddressAction.java
info/nightscout/androidaps/plugins/pump/omnipod/dash/driver/comm/session/SessionEstablisher.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files:
 info/nightscout/androidaps/plugins/general/maintenance/MaintenancePlugin.java
info/nightscout/androidaps/BuildConfig.java
org/mozilla/javascript/tools/debugger/Dim.java
info/nightscout/androidaps/MainActivity.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files:
 ch/qos/logback/core/net/ssl/SSLContextFactoryBean.java
dev/doubledot/doki/api/remote/DokiApiService.java
info/nightscout/androidaps/plugins/general/tidepool/comm/TidepoolUploader.java
Medium
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 com/j256/ormlite/android/AndroidDatabaseConnection.java
ch/qos/logback/classic/android/SQLiteAppender.java
com/j256/ormlite/android/AndroidCompiledStatement.java
Medium
CVSS:5.9
SHA-1 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 info/nightscout/androidaps/utils/CryptoUtil.java
High
CVSS:5.9
The App uses ECB mode in Cryptographic encryption algorithm. ECB mode is known to be weak as it results in the same ciphertext for identical blocks of plaintext.
MASVS: MSTG-CRYPTO-2
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 info/nightscout/androidaps/plugins/pump/omnipod/dash/driver/comm/session/Milenage.java
Medium
CVSS:7.4
Files may contain hardcoded sensitive information like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 info/nightscout/androidaps/database/entities/PreferenceChange.java
info/nightscout/androidaps/plugins/general/smsCommunicator/otp/OneTimePassword.java
ch/qos/logback/classic/joran/action/ConfigurationAction.java
info/nightscout/androidaps/plugins/pump/common/hw/rileylink/RileyLinkConst.java
info/nightscout/androidaps/plugins/pump/medtronic/data/dto/PumpSettingDTO.java
ch/qos/logback/core/rolling/helper/IntegerTokenConverter.java
org/mozilla/javascript/ScriptRuntime.java
ru/noties/markwon/html/CssProperty.java
org/mozilla/javascript/xmlimpl/XmlNode.java
org/mozilla/javascript/NativeJavaObject.java
ru/noties/markwon/html/jsoup/nodes/DocumentType.java
org/mozilla/javascript/ClassCache.java
info/nightscout/androidaps/utils/protection/PasswordCheckKt.java
io/reactivex/internal/schedulers/SchedulerPoolFactory.java
ch/qos/logback/classic/sift/ContextBasedDiscriminator.java
org/mozilla/javascript/NativeError.java
ch/qos/logback/core/net/ssl/SSL.java
info/nightscout/androidaps/plugins/pump/omnipod/eros/driver/communication/message/response/ErrorResponse.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 info/nightscout/androidaps/plugins/general/smsCommunicator/activities/SmsCommunicatorOtpActivity.java
Info
CVSS:0
This App may have root detection capabilities.
MASVS: MSTG-RESILIENCE-1
Files:
 com/scottyab/rootbeer/RootBeer.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 info/nightscout/androidaps/plugins/general/maintenance/PrefFileListProvider.java
ch/qos/logback/core/android/CommonPathUtil.java
Medium
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 info/nightscout/androidaps/plugin/general/openhumans/OpenHumansUploader.java
org/mozilla/javascript/tools/shell/Main.java
Medium
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 net/glxn/qrgen/core/AbstractQRCode.java
High
CVSS:0
This App may request root (Super User) privileges.
MASVS: MSTG-RESILIENCE-1
CWE-250 Execution with Unnecessary Privileges
Files:
 com/scottyab/rootbeer/Const.java
Pygal Canada: 100 Switzerland: 200 Germany: 200 United States: 1500

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

CA mindprod.com 65.110.21.43
US www.openhumans.org 3.232.242.170
US www.w3.org 128.30.52.100
US androidaps-c34f8.firebaseio.com 35.201.97.85
CH logback.qos.ch 83.173.251.158
CH www.slf4j.org 83.173.251.158
US int-app.tidepool.org 52.32.105.54
US github.com 140.82.121.4
US openaps.readthedocs.io 104.17.33.82
US raw.githubusercontent.com 185.199.108.133
US apache.org 151.101.2.132
US gitter.im 3.216.74.90
DE intapp.tidepool.org 143.204.98.75
androidaps.readdocs.io
US xmlpull.org 74.50.61.58
US dontkillmyapp.com 185.199.111.153
US app.tidepool.org 50.112.226.136
US androidaps.readthedocs.io 104.17.33.82
DE loopercommunity.org 94.130.8.248
US xml.org 104.239.240.11
US www.facebook.com 185.60.216.35

URL analysis

Information computed with MobSF.

http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
http://xmlpull.org/v1/doc/features.html#names-interned
http://xmlpull.org/v1/doc/features.html#xml-roundtrip
http://xmlpull.org/v1/doc/properties.html#location
http://xmlpull.org/v1/doc/properties.html#xmldecl-content
http://xmlpull.org/v1/doc/properties.html#xmldecl-standalone
http://xmlpull.org/v1/doc/properties.html#xmldecl-version
http://www.w3.org/2000/xmlns/
http://www.w3.org/XML/1998/namespace
http://xmlpull.org/v1/doc/features.html#process-namespaces
http://xmlpull.org/v1/doc/features.html#process-docdecl
Defined in io/github/xstream/mxparser/MXParser.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/Flowable.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/Completable.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/Maybe.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/Observable.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/Single.java
https://github.com/ReactiveX/RxJava/wiki/What's-different-in-2.0#error-handling
Defined in io/reactivex/exceptions/UndeliverableException.java
https://github.com/ReactiveX/RxJava/wiki/Error-Handling
Defined in io/reactivex/exceptions/OnErrorNotImplementedException.java
http://logback.qos.ch/codes.html#layoutInsteadOfEncoder
Defined in ch/qos/logback/core/OutputStreamAppender.java
http://logback.qos.ch/codes.html#tbr_fnp_not_set
Defined in ch/qos/logback/core/rolling/TimeBasedRollingPolicy.java
http://logback.qos.ch/codes.html#sbtp_size_format
Defined in ch/qos/logback/core/rolling/SizeBasedTriggeringPolicy.java
http://logback.qos.ch/codes.html#tbr_fnp_prudent_unsupported
http://logback.qos.ch/codes.html#fwrp_parentFileName_not_set
http://logback.qos.ch/codes.html#tbr_fnp_not_set
Defined in ch/qos/logback/core/rolling/FixedWindowRollingPolicy.java
http://logback.qos.ch/codes.html#tbr_fnp_prudent_unsupported
http://logback.qos.ch/codes.html#fwrp_parentFileName_not_set
http://logback.qos.ch/codes.html#tbr_fnp_not_set
Defined in ch/qos/logback/core/rolling/FixedWindowRollingPolicy.java
http://logback.qos.ch/codes.html#tbr_fnp_prudent_unsupported
http://logback.qos.ch/codes.html#fwrp_parentFileName_not_set
http://logback.qos.ch/codes.html#tbr_fnp_not_set
Defined in ch/qos/logback/core/rolling/FixedWindowRollingPolicy.java
http://logback.qos.ch/codes.html#rfa_collision
http://logback.qos.ch/codes.html#rfa_no_rp
http://logback.qos.ch/codes.html#rfa_no_tp
http://logback.qos.ch/codes.html#rfa_file_after
Defined in ch/qos/logback/core/rolling/RollingFileAppender.java
http://logback.qos.ch/codes.html#rfa_collision
http://logback.qos.ch/codes.html#rfa_no_rp
http://logback.qos.ch/codes.html#rfa_no_tp
http://logback.qos.ch/codes.html#rfa_file_after
Defined in ch/qos/logback/core/rolling/RollingFileAppender.java
http://logback.qos.ch/codes.html#rfa_collision
http://logback.qos.ch/codes.html#rfa_no_rp
http://logback.qos.ch/codes.html#rfa_no_tp
http://logback.qos.ch/codes.html#rfa_file_after
Defined in ch/qos/logback/core/rolling/RollingFileAppender.java
http://logback.qos.ch/codes.html#rfa_collision
http://logback.qos.ch/codes.html#rfa_no_rp
http://logback.qos.ch/codes.html#rfa_no_tp
http://logback.qos.ch/codes.html#rfa_file_after
Defined in ch/qos/logback/core/rolling/RollingFileAppender.java
http://logback.qos.ch/codes.html#renamingError
Defined in ch/qos/logback/core/rolling/helper/RenameUtil.java
http://logback.qos.ch/codes.html#1andOnly1
Defined in ch/qos/logback/core/sift/SiftingJoranConfiguratorBase.java
http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd
Defined in ch/qos/logback/core/html/HTMLLayoutBase.java
http://logback.qos.ch/codes.html#missingRightParenthesis
Defined in ch/qos/logback/core/pattern/parser/Parser.java
http://xml.org/sax/features/validation
http://xml.org/sax/features/namespaces
Defined in ch/qos/logback/core/joran/event/SaxEventRecorder.java
http://xml.org/sax/features/validation
http://xml.org/sax/features/namespaces
Defined in ch/qos/logback/core/joran/event/SaxEventRecorder.java
http://logback.qos.ch/codes.html#appender_order
Defined in ch/qos/logback/core/joran/action/AppenderRefAction.java
http://logback.qos.ch/codes.html#socket_no_port
http://logback.qos.ch/codes.html#socket_no_host
Defined in ch/qos/logback/core/net/AbstractSocketAppender.java
http://logback.qos.ch/codes.html#socket_no_port
http://logback.qos.ch/codes.html#socket_no_host
Defined in ch/qos/logback/core/net/AbstractSocketAppender.java
http://logback.qos.ch/codes.html#syslog_layout
Defined in ch/qos/logback/core/net/SyslogAppenderBase.java
http://logback.qos.ch/codes.html#smtp_no_layout
Defined in ch/qos/logback/core/net/SMTPAppenderBase.java
http://logback.qos.ch/css/classic.css
Defined in ch/qos/logback/classic/html/UrlCssBuilder.java
http://logback.qos.ch/codes.html#receiver_no_port
http://logback.qos.ch/codes.html#receiver_no_host
Defined in ch/qos/logback/classic/net/SocketReceiver.java
http://logback.qos.ch/codes.html#receiver_no_port
http://logback.qos.ch/codes.html#receiver_no_host
Defined in ch/qos/logback/classic/net/SocketReceiver.java
https://dontkillmyapp.com/api/v2/
https://dontkillmyapp.com
Defined in dev/doubledot/doki/api/extensions/ConstantsKt.java
https://dontkillmyapp.com/api/v2/
https://dontkillmyapp.com
Defined in dev/doubledot/doki/api/extensions/ConstantsKt.java
http://apache.org/xml/features/disallow-doctype-decl
Defined in com/thoughtworks/xstream/io/xml/JDom2Driver.java
http://apache.org/xml/features/disallow-doctype-decl
Defined in com/thoughtworks/xstream/io/xml/DomDriver.java
http://apache.org/xml/features/disallow-doctype-decl
Defined in com/thoughtworks/xstream/io/xml/JDomDriver.java
http://com.thoughtworks.xstream/sax/property/configured-xstream
http://com.thoughtworks.xstream/sax/property/source-object-list
http://xml.org/sax/features/namespaces
http://xml.org/sax/features/namespace-prefixes
Defined in com/thoughtworks/xstream/io/xml/SaxWriter.java
http://com.thoughtworks.xstream/sax/property/configured-xstream
http://com.thoughtworks.xstream/sax/property/source-object-list
http://xml.org/sax/features/namespaces
http://xml.org/sax/features/namespace-prefixes
Defined in com/thoughtworks/xstream/io/xml/SaxWriter.java
http://apache.org/xml/features/disallow-doctype-decl
Defined in com/thoughtworks/xstream/io/xml/Dom4JDriver.java
http://mindprod.com
Defined in com/mindprod/ledatastream/LEDataInputStream.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#replay
http://www.slf4j.org/codes.html#version_mismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#loggerNameMismatch
Defined in org/slf4j/LoggerFactory.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#replay
http://www.slf4j.org/codes.html#version_mismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#loggerNameMismatch
Defined in org/slf4j/LoggerFactory.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#replay
http://www.slf4j.org/codes.html#version_mismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#loggerNameMismatch
Defined in org/slf4j/LoggerFactory.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#replay
http://www.slf4j.org/codes.html#version_mismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#loggerNameMismatch
Defined in org/slf4j/LoggerFactory.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#replay
http://www.slf4j.org/codes.html#version_mismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#loggerNameMismatch
Defined in org/slf4j/LoggerFactory.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#replay
http://www.slf4j.org/codes.html#version_mismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#loggerNameMismatch
Defined in org/slf4j/LoggerFactory.java
http://www.slf4j.org/codes.html#no_static_mdc_binder
http://www.slf4j.org/codes.html#null_MDCA
Defined in org/slf4j/MDC.java
http://www.slf4j.org/codes.html#no_static_mdc_binder
http://www.slf4j.org/codes.html#null_MDCA
Defined in org/slf4j/MDC.java
http://logback.qos.ch/codes.html#null_CS
Defined in org/slf4j/impl/StaticLoggerBinder.java
http://javax.xml.XMLConstants/feature/secure-processing
http://apache.org/xml/features/disallow-doctype-decl
http://apache.org/xml/features/nonvalidating/load-external-dtd
http://javax.xml.XMLConstants/property/accessExternalDTD
http://javax.xml.XMLConstants/property/accessExternalStylesheet
Defined in org/mozilla/javascript/xmlimpl/XmlProcessor.java
http://javax.xml.XMLConstants/feature/secure-processing
http://apache.org/xml/features/disallow-doctype-decl
http://apache.org/xml/features/nonvalidating/load-external-dtd
http://javax.xml.XMLConstants/property/accessExternalDTD
http://javax.xml.XMLConstants/property/accessExternalStylesheet
Defined in org/mozilla/javascript/xmlimpl/XmlProcessor.java
http://www.w3.org/2000/xmlns/
Defined in org/mozilla/javascript/xmlimpl/XmlNode.java
https://github.com/MilosKozak/AndroidAPS.git
Defined in info/nightscout/androidaps/BuildConfig.java
https://github.com/MilosKozak/AndroidAPS.git
Defined in info/nightscout/androidaps/MainApp.java
https://github.com/nightscout/AndroidAPS.git
Defined in info/nightscout/androidaps/plugin/general/openhumans/OpenHumansUploader$uploadDataPaged$18.java
https://www.openhumans.org
https://www.openhumans.org/direct-sharing/projects/oauth2/authorize/?client_id=
Defined in info/nightscout/androidaps/plugin/general/openhumans/dagger/OpenHumansModule.java
https://www.openhumans.org
https://www.openhumans.org/direct-sharing/projects/oauth2/authorize/?client_id=
Defined in info/nightscout/androidaps/plugin/general/openhumans/dagger/OpenHumansModule.java
https://openaps.readthedocs.io/en/latest/
Defined in info/nightscout/androidaps/setupwizard/SWDefinition.java
https://raw.githubusercontent.com/nightscout/AndroidAPS/versions/definition.json
Defined in info/nightscout/androidaps/plugins/constraints/versionChecker/VersionCheckerUtils.java
https://raw.githubusercontent.com/nightscout/AndroidAPS/master/app/src/main/assets/revoked_certs.txt
Defined in info/nightscout/androidaps/plugins/constraints/signatureVerifier/SignatureVerifierPlugin.java
https://github.com/MilosKozak/AndroidAPS.git
Defined in info/nightscout/androidaps/plugins/general/maintenance/MaintenancePlugin.java
https://androidaps.readthedocs.io
https://www.facebook.com/groups/AndroidAPSUsers
https://androidaps.readthedocs.io/en/latest/EN/Module/module.html#good-individual-dosage-algorithm-for-your-diabetes-therapy
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/FAQ.html#androidaps-settings
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/FAQ.html#insulin-to-carb-ratio-ic-g-u
https://androidaps.readthedocs.io/en/latest/EN/Configuration/Config-Builder.html?#insulin
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/FAQ.html#what-to-do-when-taking-a-shower-or-bath
https://dontkillmyapp.com/
https://raw.githubusercontent.com/urbandroid-team/dont-kill-my-app/master/LICENCE
https://androidaps.readthedocs.io/en/latest/EN/Usage/Objectives.html#skip-objectives
https://androidaps.readthedocs.io/en/latest/EN/Usage/temptarget.html#activity-temp-target
https://androidaps.readthedocs.io/en/latest/EN/Usage/Extended-Carbs.html
https://androidaps-c34f8.firebaseio.com
https://androidaps.readthedocs.io/en/latest/EN/Usage/temptarget.html
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/FAQ.html#carbohydrate-to-insulin-ratio-cr-g-u
https://androidaps.readthedocs.io/en/latest/EN/Configuration/Config-Builder.html#insulin
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/FAQ.html#insulin-sensitivity-factor-isf-mmol-l-u-or-mg-dl-u
https://androidaps.readthedocs.io/en/latest/EN/Usage/Profiles.html
https://androidaps.readthedocs.io/en/latest/EN/Usage/Smoothing-Blood-Glucose-Data-in-xDrip.html#smoothing-blood-glucose-data
https://androidaps.readthedocs.io/en/latest/EN/Children/Children.html
https://androidaps.readthedocs.io/en/latest/EN/Usage/Automation.html)
https://androidaps.readthedocs.io/en/latest/EN/Usage/ExportImportSettings.html
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/FAQ.html#what-emergency-equipment-is-recommended-to-take-with-me
https://androidaps.readthedocs.io/en/latest/EN/Configuration/Config-Builder.html#profile
http://openaps.readthedocs.io/en/latest/docs/walkthrough/phase-3/beyond-low-glucose-suspend.html
https://androidaps.readthedocs.io/en/latest/EN/Module/module.html
https://androidaps.readthedocs.io/en/latest/EN/Usage/Profiles.html?highlight=profile%20switch#profile-switch
https://androidaps.readthedocs.io/en/latest/EN/Usage/Profiles.html?highlight=profile%20switch#timeshift
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/FAQ.html#other-settings
https://androidaps.readthedocs.io/en/latest/EN/Configuration/Sensitivity-detection-and-COB.html
https://androidaps.readthedocs.io/en/latest/Configuration/Sensitivity-detection-and-COB.html
https://int-app.tidepool.org
https://app.tidepool.org/
https://androidaps.readthedocs.io/en/latest/EN/Installing-AndroidAPS/Update-to-new-version.html#troubleshooting
https://www.facebook.com/groups/AndroidAPSUsers/
https://gitter.im/MilosKozak/AndroidAPS
https://androidaps.readthedocs.io/en/latest/EN/Installing-AndroidAPS/Update-to-new-version.html#update-to-a-new-version-or-branch
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/Screenshots.html#config-builder
https://androidaps.readthedocs.io/en/latest/EN/Getting-Started/Screenshots.html#the-homescreen
https://loopercommunity.org
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Module/module.html#gute-individuelle-profileinstellungen-fur-deine-diabetes-therapie
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/FAQ.html#androidaps-einstellungen
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/FAQ.html#insulin-kohlenhydrat-verhaltnis-insulin-to-carb-ratio-ic-g-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Configuration/Config-Builder.html#insulin
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/FAQ.html#was-mache-ich-wenn-ich-duschen-oder-ein-bad-nehmen-mochte
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/Objectives.html#objectives-ziele-uberspringen.
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/temptarget.html#aktivitaten-temp-target
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/Extended-Carbs.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/temptarget.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/FAQ.html#kh-faktor-carbohydrate-to-insulin-ratio-cr-g-ie
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/FAQ.html#korrekturfaktor-isf-mg-dl-ie-oder-mmol-l-ie
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/Profiles.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/Smoothing-Blood-Glucose-Data-in-xDrip.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Children/Children.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/Automation.html)
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/ExportImportSettings.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/FAQ.html#was-sollte-ich-fur-den-notfall-immer-dabei-haben
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Configuration/Config-Builder.html#profil
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Module/module.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/Profiles.html#prozentsatz
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Usage/Profiles.html#zeitverschiebung
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/FAQ.html#andere-einstellungen
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Configuration/Sensitivity-detection-and-COB.html
https://androidaps.readthedocs.io/de/latest/Configuration/Sensitivity-detection-and-COB.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Installing-AndroidAPS/Update-to-new-version.html#problembehandlung
https://www.facebook.com/groups/loopedDE/
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Installing-AndroidAPS/Update-to-new-version.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/Screenshots.html#konfiguration
https://androidaps.readthedocs.io/en/latest/CROWDIN/de/Getting-Started/Screenshots.html#die-startseite
https://app.tidepool.org
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Module/module.html#spravny-individualni-algoritmus-davkovani-pro-lecbu-vaseho-diabetu
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/FAQ.html#nastaveni-androidaps
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/FAQ.html#inzulinovosacharidovy-pomer-ic-g-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Configuration/Config-Builder.html#inzulin
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/FAQ.html#co-delat-pri-sprchovani-a-koupani
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/Objectives.html#skip-objectives.
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/temptarget.html#docasny-cil-pri-pohybove-aktivite
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/Extended-Carbs.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/temptarget.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/FAQ.html#inzulino-sacharidovy-pomer-cr-g-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/FAQ.html#korekcni-faktor-citlivost-na-inzulin-isf-mmol-l-u-nebo-mg-dl-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/Profiles.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/Smoothing-Blood-Glucose-Data-in-xDrip.html#vyhlazovani-zarusenych-dat-glykemii
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Children/Children.html
https://androidaps.readdocs.io/en/latest/CROWDIN/cs/Usage/Automation.html)
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/ExportImportSettings.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/FAQ.html#jake-vybaveni-pro-pripad-nouze-se-doporucuje-brat-s-sebou
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Configuration/Config-Builder.html#profile
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Module/module.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/Profiles.html?highlight=p%C5%99epnut%C3%AD%20profilu
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Usage/Profiles.html#posun-casu
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/FAQ.html#dalsi-nastaveni
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Configuration/Config-Builder.html#detekce-citlivosti
https://androidaps.readthedocs.io/cs/latest/Configuration/Sensitivity-detection-and-COB.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/index.html#poradce-pri-potizich
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Installing-AndroidAPS/Update-to-new-version.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/Screenshots.html#konfigurace
https://androidaps.readthedocs.io/en/latest/CROWDIN/cs/Getting-Started/Screenshots.html#hlavni-stranka
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Module/module.html#goed-individueel-doserings-algoritme-voor-jouw-diabetesbehandeling
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/FAQ.html#androidaps-instellingen
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Configuration/Config-Builder.html#insuline
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/FAQ.html#wat-te-doen-tijdens-het-douchen
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/Objectives.html#doelen-overslaan
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/temptarget.html#activiteit-tijdelijk-streefdoel
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/Extended-Carbs.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/temptarget.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/FAQ.html#Koolhydraat-ratio-KH-g-E
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/FAQ.html#insuline-gevoeligheids-factor-insulin-sensitivity-factor-ISF-mmol-l-E-of-mg-dl-E
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/Profiles.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/Smoothing-Blood-Glucose-Data-in-xDrip.html#filteren-van-bloed-glucose-waardes
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Children/Children.html
https://androidaps.readthedocs.io/en/latest/NL/Usage/Automation.html)
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/ExportImportSettings.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/FAQ.html#welke-spullen-moet-ik
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Configuration/Config-Builder.html#profiel
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Module/module.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/Profiles.html?highlight=profilewitch#profiel-wissel
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Usage/Profiles.html?highlight=profilewitch#tijd-verschuiving
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/FAQ.html#overige-instellingen
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Configuration/Sensitivity-detection-and-COB.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Installing-AndroidAPS/Update-to-new-version.html#problemen-oplossen
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Installing-AndroidAPS/Update-to-new-version.html#bijwerken-naar-een-nieuwe-versie
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/Screenshots.html#configurator
https://androidaps.readthedocs.io/en/latest/CROWDIN/nl/Getting-Started/Screenshots.html#overzicht-scherm
https://androidaps.readthedocs.io/en/latest/EN/Usage/Objectives.html#skip-objectives.
https://intapp.tidepool.org
https://androidaps.readthedocs.io/en/latest/EN/Usage/temptarget.html#active
https://int-app.tidepool.org,
https://androidaps.readthedocs.io/fr/latest/
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Module/module.html#good-individual-dosage-algorithm-for-your-diabetes-therapy
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Getting-Started/FAQ.html#androidaps-settings
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Getting-Started/FAQ.html#rapport-glucides-insuline-g-i-g-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Configuration/Config-Builder.html?#insulin
https://androidaps.readthedocs.io/fr/latest/Getting-Started/FAQ.html#que-faire-pour-prendre-une-douche-ou-un-bain
https://androidaps.readthedocs.io/fr/latest/Usage/Objectives.html#ignorer-les-objectifs
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/temptarget.html#activity-temp-target
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/temptarget.html#cible-temporaire-activite
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/Extended-Carbs.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/temptarget.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Configuration/Config-Builder.html#insulin
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Getting-Started/FAQ.html#insulin-sensitivity-factor-isf-mmol-l-u-or-mg-dl-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/Profiles.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/Smoothing-Blood-Glucose-Data-in-xDrip.html#smoothing-blood-glucose-data
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Children/Children.html
https://androidaps.readthedocs.io/fr/latest/Usage/Automation.html)
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/ExportImportSettings.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Getting-Started/FAQ.html#what-emergency-equipment-is-recommended-to-take-with-me
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Configuration/Config-Builder.html#profile
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Module/module.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Usage/Profiles.html?highlight=profile%20switch#profile-switch
https://androidaps.readthedocs.io/en/latest/EN/Usage/Profiles.html?highlight=profilewitch#timeshift
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Getting-Started/FAQ.html#other-settings
https://androidaps.readthedocs.io/fr/latest/Configuration/Sensitivity-detection-and-COB.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Installing-AndroidAPS/Update-to-new-version.html#troubleshooting
https://androidaps.readthedocs.io/en/latest/CROWDIN/fr/Installing-AndroidAPS/Update-to-new-version.html#update-to-a-new-version-or-branch
https://androidaps.readthedocs.io/fr/latest/Configuration/Config-Builder.html
https://androidaps.readthedocs.io/fr/latest/Getting-Started/Screenshots.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Module/module.html#good-individual-dosage-algorithm-for-your-diabetes-therapy
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/FAQ.html#androidaps-settings
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Configuration/Config-Builder.html?#insulin
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/FAQ.html#what-to-do-when-taking-a-shower-or-bath
https://androidaps.readthedocs.io/en/latest/EN/Usage/Objectives.html#skip-objectives를
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/temptarget.html#activity-temp-target
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/Extended-Carbs.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/temptarget.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/FAQ.html#carbohydrate-to-insulin-ratio-cr-g-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Configuration/Config-Builder.html#insulin
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/FAQ.html#insulin-sensitivity-factor-isf-mmol-l-u-or-mg-dl-u
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/Profiles.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/Smoothing-Blood-Glucose-Data-in-xDrip.html#smoothing-blood-glucose-data
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Children/Children.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/ExportImportSettings.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/FAQ.html#what-emergency-equipment-is-recommended-to-take-with-me
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Configuration/Config-Builder.html#profile
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Module/module.html
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/Profiles.html?highlight=profile%20switch#profile-switch
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Usage/Profiles.html?highlight=profile%20switch#timeshift
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/FAQ.html#other-settings
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Configuration/Sensitivity-detection-and-COB.html
https://app.tidepool.org/이
https://int-app.tidepool.org/로
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Installing-AndroidAPS/Update-to-new-version.html#troubleshooting
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Installing-AndroidAPS/Update-to-new-version.html#update-to-a-new-version-or-branch
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/Screenshots.html#config-builder
https://androidaps.readthedocs.io/en/latest/CROWDIN/ko/Getting-Started/Screenshots.html#the-homescreen
https://androidaps.readthedocs.io/en/latest/EN/Usage/Profiles.html?highlight=profilewitch#profile-switch
https://androidaps.readthedocs.io/es/latest/Configuration/Sensitivity-detection-and-COB.html
https://www.facebook.com/groups/aapsitalia
https://www.facebook.com/groups/aapsitalia/
Defined in Android String Resource