Does Costco App Need these permissions?

A neighbor wanted to use the Costco app <play.google.com/store/apps/datasafety?id=com.costco.app.android&hl=en_US&gl=US> to have the digital member card and just use their phone for shopping instead of carrying a physical card. They asked if it was a a good idea.
Checked the permissions in the play store
Why does Costco need to read messages, emails and browser history? [image: image.png]
The benefit of the app is not worth giving up privacy IMHOP.

Intel Finder

Low Cost Threat Intel Provider intelfinder.io
Identify threats such as:
– Similar Domain Registration: threat of Phishing, brand abuse and cybersquatting – Leaked Employee Credentials – Exposed Subdomains – Rogue Mobile Apps – Leaked Documents – Leaked Source Code – Domain Hijacking – Domain and SSL Certificate Expiration

Binary file identifier analyzer

Try it. github.com/horsicq/Detect-It-Easy
Detect It Easy, or abbreviated “DIE” is a program for determining types of files.
“DIE” is a cross-platform application, apart from Windows version there are also available versions for Linux and Mac OS.
Many programs of the kind (PEID, PE tools) allow to use third-party signatures. Unfortunately, those signatures scan only bytes by the pre-set mask, and it is not possible to specify additional parameters. As the result, false triggering often occur. More complicated algorithms are usually strictly set in the program itself. Hence, to add a new complex detect one needs to recompile the entire project. No one, except the authors themselves, can change the algorithm of a detect. As time passes, such programs lose relevance without the constant support.

free domains, simple DDNS, other addr.tools

Freenom stopped domain registrations several months ago. Netcraft has reported a drop in phishing emails blocked with Freenom domains www.netcraft.com/blog/impact-of-freenom-halting-registrations-on-cybercrime/#:~:text=Freenom%2C%20which%20offers%20free%20domain,domain%20registrations%20in%20March%202023 .
Some are looking to other free domain providers such as pp.ua or eu.org nic.eu.org/
dyn.addr.tools has a simple DDNS method
There are other related tools challenges.addr.tools dns-01 ACME challenge helper zone dyn.addr.tools simple dynamic DNS for your own domains, no account required header-echo.addr.tools view HTTP request headers, modify HTTP response headers info.addr.tools explore identifying information for domain names and IP addresses ip.addr.tools construct domain names that resolve to any given IP address myip.addr.tools get your external IP address dnscheck.tools identifies your DNS resolvers, checks DNSSEC validation, and more
dyn.addr.tools/
dnscheck.tools/#more