4 ms·
It allows Google to easily circumvent any end-to-end encryption since it's a rootkit.
by jhasse 8y ago
It allows Google to easily circumvent any end-to-end encryption since it's a rootkit.
- JustSomeNobody 8y agoHow? What mechanism? Does it access the plain text from the keyboard before the app encrypts it?
- jhasse 8y agoIt could do that.
- Tomte 8y agoGoogle certainly doesn‘t need the Play services to do that. If you assume Google to be malicious in that way, no app on your Android phone can be secure.
- jhasse 8y agoSure, but the Play services make it A LOT easier for them.
- mjg59 8y agoHow? (I work for Google, I don't work on Android)
- jhasse 8y agoThe Play services run as root IIRC and listen to commands from Google's servers (e.g. to push updates to the devices). Even if they don't have enough priveleges to intercept the keyboard, Google has all the signing keys to replace system apps that do.
- mjg59 8y agoThe full set of Android processes running as root on my Pixel 2 is https://pastebin.com/sTtQVz3m https://pastebin.com/sTtQVz3m - which of these is from Play Services? I think that in most cases the system services that are in a position to interfere with the keyboard in any way are provided by the phone manufacturer rather than Google - obviously if you're running gBoard then Google has control over that, but I'm not aware of any way that Google fundamentally has control over the other frameworks that the keyboard interacts with (but, again, I don't work on Android - I'd love a more definitive answer on this)