用户下载了我们尚未发布的应用程序版本
我们刚刚将应用程序的最新版本上传到 Android Play 商店开发者控制台 - 已保存但尚未提交审核。然而,上传大约 3 分钟后,我们收到了几封应用程序生成的电子邮件,报告我们最新版本的应用程序出现错误。电子邮件不仅标识应用程序版本号,而且电子邮件中的数据只能来自此最新版本,因为它是专门添加到此最新版本的 - 所以我们知道 1000% 电子邮件来自此尚未发布的版本。同一用户能够在 Android OS 6.0.1 上使用 Nexus 5X 下载所有错误报告电子邮件背后的尚未发布的版本 - 来自新斯科舍省(基于错误电子邮件中报告的 GPS 信息)
这怎么可能?< /strong>
该应用程序不属于任何开放或内部测试或预注册或预启动项目的一部分。考虑到我们还没有提交它进行审查,这更令人不安。
该应用程序位于开发服务器上,位于非常安全的网络后面,因此我们知道它没有在我们上传它的同时从我们的服务器上被盗(然后侧面加载)。我们的 PaloAlto FW 跟踪所有出站文件附件和数据流 - 这表明我们的服务器仅与 Google 服务器通信。
我们已经就此事联系了 Google - 但他们的回复时间通常在 3 到 5000 天之间......所以谁知道我们是否会很快收到任何回复。
顺便说一句,产生错误的原因是我们尚未激活某些服务器代码 - 该代码在应用程序获准发布后激活。
We just uploaded the newest version of our app to the Android Play Store Developers Console - its saved but not yet submitted for review. However, about 3 minutes after we uploaded it we got several app generated emails reporting errors from this newest version of our app. Not only do the emails identify the app version number, there is also data in the emails that can only come from this newest version because it was specifically added to this newest version - so we know 1000% the emails came from this not yet released version. The same user was able download this not yet release version was behind all error reported emails - from Nova Scotia (based on reported GPS info in error email) using a Nexus 5X on Android OS 6.0.1
How is this possible?
The app is not a part of any open or internal testing or and pre-registration or pre-launch project. And considering we haven't even submitted it for review yet this is even more troubling.
The app is on development servers is behind a very secure network so we know it wasn't stolen (then side loaded) from our server at coincidentally the same time we uploaded it. Our PaloAlto FWs track all outbound file attachments and data streams - which shows our server only communicating with Google servers.
We have contacted Google about this - but their response time is usually between 3 and 5000 days....so who knows if we will hear anything back any time soon.
On a side note, the errors were generated because we haven't activated certain server code yet - that code is activated after the app is cleared for release.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
将 App Bundle 上传到 Google Play 开发者控制台后,即可在 Google Firebase 测试实验室的 Android 设备上启动自动化测试。
请参阅开发者控制台中的发布前报告概述。
测试报告为您提供有关应用程序稳定性、性能、可访问性以及安全性和信任的初步反馈。这可以帮助开发人员在花时间进行质量检查之前发现并解决问题。
报告的性能部分包括每个测试设备的“平均网络发送”和“平均网络接收”字节。
单击该列表中设备的右箭头可访问测试持续时间内的“网络发送”和“网络接收”图表(以字节/秒为单位)。播放录制的屏幕视频以查看应用程序的 UI 在发送和接收字节时正在执行的操作。
Uploading an App Bundle to the Google Play Developer's Console starts automated tests running on Android devices in Google's Firebase Test Lab.
See the Pre-launch report Overview in the developer's console.
The test report gives you initial feedback on app Stability, Performance, Accessibility, and Security and Trust. This helps developers catch and fix problems before spending people time on QA.
The Performance section of the report includes the "Avg. network sent" and "Avg. network received" bytes by each test device.
Click on the right arrow for a device in that list to access the "Network sent" and "Network received" graphs in bytes/sec over the test duration. Play the recorded screen video to see what the app's UI was doing when it was sending and receiving bytes.