Abstract:
This week Apple launched the official version of iOS 27.2. In this version, Apple brings new permission settings for users in mainland China: sports and fitness. This permission can be used to control whether the application can obtain gyroscope and accelerometer parameters. Some applications can jump by detecting the sensor when opening the screen and shaking the ad.
However, the iOS version of Baidu Netdisk can still continue to jump to shake ads after the sports and fitness permissions are blocked. In previous discussions, some netizens speculated that Baidu Netdisk may not need to detect gyroscopes and accelerometers, but set random delays. As long as the delay time is reached, it will be judged that the user has triggered the shake and the advertisement will automatically jump.
AI analysis found that Baidu Netdisk also uses a magnetometer:
Developer @王陈杰 used AI to analyze Baidu Netdisk’s open-screen advertising jump logic and shared the final report with Blue Dot. Analysis found that there is a special NoShake variant in the framework used by Baidu Netdisk. This variant does not rely on conventional CoreMotion action monitoring, but uses CLHeading in Apple's Core Location framework to obtain device orientation data.
CLHeading is a magnetometer-related framework that provides the orientation of the device relative to magnetic north and the three-axis magnetic field data used to calculate the orientation. Simply put, when the posture of the phone changes, the data returned by the magnetometer may also change accordingly, and the advertising component can use this to determine whether the user has moved or turned the phone.
Therefore disabling gyroscope and accelerometer permissions is useless:
At least in the case of the iOS version of Baidu Netdisk, prohibiting Baidu Netdisk from obtaining gyroscope and accelerometer permissions is useless. Baidu Netdisk has prepared backup methods to detect whether the phone is moving or shaking. However, not all applications may have alternative frameworks developed in advance like Baidu Netdisk.
The beta version of iOS 27.2 was released on September 23, and the sample that the developer used AI analysis this time was Baidu Netdisk iOS version 13.36.0, which was released on October 22. Of course, this cannot determine whether Baidu Netdisk added the NoShake variant after the release of the iOS 27.2 beta version to deal with sensor permission restrictions.
The analysis report does mention automatic redirection without clicks:
The report also mentioned a zero-click branch: when a specific parameter combination meets the conditions, it will wait for about 1 second after being triggered. If the user does not click during this period, the SDK will automatically execute the ad click process. Other parameter combinations may also directly enter the click process after triggering.
This mechanism provides clues worth paying attention to the previous speculation by netizens that it will automatically jump after a period of time. However, the analysis report did not obtain a real advertising response, so it is impossible to determine which set of parameters are actually used in online advertising.
Comments