this post was submitted on 27 Feb 2025
1025 points (96.8% liked)

Technology

64074 readers
5837 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”

(page 4) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 6 days ago

Samsung lets me uninstall it now problem.

[–] [email protected] -3 points 6 days ago (1 children)

True or not, one can avoid the whole issue by using your phone as a phone, maybe to send texts, with location, mike, and camera switched off permanently, and all the other apps deleted or disabled. Sure, Google will still know you called your SO daily and your Mom once a week (NOT ENOUGH!), and that you were supposed to pick up the dry cleaning last night (did you?). Meh. If that's what floats the Surveillance Society's boat, I am not too worried.

load more comments (1 replies)
[–] [email protected] 0 points 6 days ago (2 children)

Basically, ot scans all files and shit like an antivirus does on windows? Oks

load more comments (2 replies)
[–] [email protected] -2 points 6 days ago (9 children)

Seriously…. Why do people continue to buy their products? They’re seemingly one of the most invasive security risks one could be involved with.

[–] [email protected] -2 points 6 days ago

Most people don't really know what that actually means, and they don't feel they have anything to hide from some nebulous corporate entity.

load more comments (7 replies)
[–] [email protected] 220 points 1 week ago (6 children)

SafetyCore Placeholder so if it ever tries to reinstall itself it will fail due to signature mismatch.

[–] [email protected] 43 points 1 week ago (8 children)

I struggle with GitHub sometimes. It says to download the apk but I don't see it in the file list. Anyone care to point me in the right direction?

[–] [email protected] 41 points 1 week ago (5 children)

There's an app called obtainium that let's you link the main page of github apps and manages both the download, the instalation and the updates of those apps.

Great if you want the latest software directly from the source.

load more comments (5 replies)
[–] [email protected] 30 points 1 week ago (1 children)
load more comments (1 replies)
load more comments (6 replies)
load more comments (5 replies)
[–] [email protected] 119 points 1 week ago (3 children)

Gimme Linux phone, I’m ready for it.

[–] [email protected] 38 points 1 week ago (12 children)

if there was something that could run android apps virtualized, I'd switch in a heartbeat

load more comments (12 replies)
[–] [email protected] 29 points 1 week ago* (last edited 1 week ago) (9 children)

The Firefox Phone should've been a real contender. I just want a browser in my pocket that takes good pictures and plays podcasts.

load more comments (9 replies)
load more comments (1 replies)
[–] [email protected] 119 points 1 week ago (1 children)

Google says that SafetyCore “provides on-device infrastructure for securely and privately performing classification to help users detect unwanted content. Users control SafetyCore, and SafetyCore only classifies specific content when an app requests it through an optionally enabled feature.”

GrapheneOS — an Android security developer — provides some comfort, that SafetyCore “doesn’t provide client-side scanning used to report things to Google or anyone else. It provides on-device machine learning models usable by applications to classify content as being spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users.”

But GrapheneOS also points out that “it’s unfortunate that it’s not open source and released as part of the Android Open Source Project and the models also aren’t open let alone open source… We’d have no problem with having local neural network features for users, but they’d have to be open source.” Which gets to transparency again.

load more comments (1 replies)
[–] [email protected] 79 points 1 week ago (9 children)
[–] [email protected] 37 points 1 week ago (2 children)

Thanks for the link, this is impressive because this really has all the trait of spyware; apparently it installs without asking for permission ?

[–] [email protected] 30 points 1 week ago

Yup, heard about it a week or two ago. Found it installed on my Samsung phone, it never asked for permissions or gave any info that it was added to my phone.

load more comments (1 replies)
[–] [email protected] 26 points 1 week ago (1 children)
load more comments (1 replies)
load more comments (7 replies)
[–] [email protected] 64 points 1 week ago* (last edited 1 week ago) (18 children)

For people who have not read the article:

Forbes states that there is no indication that this app can or will "phone home".

Its stated use is for other apps to scan an image they have access to find out what kind of thing it is (known as "classification"). For example, to find out if the picture you've been sent is a dick-pick so the app can blur it.

My understanding is that, if this is implemented correctly (a big 'if') this can be completely safe.

Apps requesting classification could be limited to only classifying files that they already have access to. Remember that android has a concept of "scoped storage" nowadays that let you restrict folder access. If this is the case, well it's no less safe than not having SafetyCore at all. It just saves you space as companies like Signal, WhatsApp etc. no longer need to train and ship their own machine learning models inside their apps, as it becomes a common library / API any app can use.

It could, of course, if implemented incorrectly, allow apps to snoop without asking for file access. I don't know enough to say.

Besides, you think that Google isn't already scanning for things like CSAM? It's been confirmed to be done on platforms like Google Photos well before SafetyCore was introduced, though I've not seen anything about it being done on devices yet (correct me if I'm wrong).

[–] [email protected] 33 points 1 week ago (5 children)

Forbes states that there is no indication that this app can or will "phone home".

That doesn't mean that it doesn't. If it were open source, we could verify it. As is, it should not be trusted.

load more comments (5 replies)
load more comments (17 replies)
[–] [email protected] 31 points 1 week ago (1 children)

I've just given it the boot from my phone.

It doesn't appear to have been doing anything yet, but whatever.

load more comments (1 replies)
[–] [email protected] 30 points 1 week ago (5 children)

I switched over to GrapheneOS a couple months ago and couldn't be happier. If you have a Pixel the switch is really easy. The biggest obstacle was exporting my contacts from my google account.

load more comments (5 replies)
[–] [email protected] 22 points 1 week ago (1 children)

Thank you was able to find and uninstall the app with no issues

load more comments (1 replies)
load more comments
view more: ‹ prev next ›