6 ms·

An Analysis of Pre-Installed Android Software [pdf]

54 points by mrzool 7y ago

deleted 7y ago
[deleted]
antpls 7y ago
Interesting paper. I didn't fully read it yet, but according to the figures : - Samsung looks worst than any other vendors (incl. Huawei) about permissions granted to pre-installed apps - Apps probably set many hidden cookies and identifiers in logs, possibly share information with other apps and bypassing permissions ? Quick note : - figure 1 is not much readable - figure 3 looks broken or misaligned
Iolaum 7y ago
I skimmed through the paper. I m thinking of keeping it to give it to anyone who asks me why I bother replacing stock ROMs with LineageOS on my devices.
- oil25 7y ago
  Agreed. Another satisfied LineageOS (Nexus 6P) user here. Huge thanks to any devs that might be reading this. Our intimate private data is not a commodity!
- dfrage 7y ago
  Just make sure the whole combo can call your country's emergency number: https://news.ycombinator.com/item?id=19479636 https://news.ycombinator.com/item?id=19479636 The Reddit link describes the the details for scheduling a 911 test call in the US, and as the link details, this failure has also been known to happen with stock phones.
- 1023bytes 7y ago
  Unfortunately installing a custom ROM voids Google's SafetyNet, which stops many important apps from working, like Google Pay, Netlix, Snapchat and a ton of banking apps. Before this was a thing I used a custom ROM on every device, but now it's quite difficult.
  - phishfi 7y ago
    Magisk fixes this problem, though. Most users I know who run custom ROMs also install Magisk to allow those apps to install and run without issue.
  - Iolaum 7y ago
    Not really, It depends on your ROM. As a rule of a thumb if you install pure lineageOS+openGAPPS+fdroidPriviligedExtension you will have a working safetyNet. That means no root module (but you can get root by enabling adb if you really want it, e.g. for GSAM battery monitor I give it the battery stats permission from adb). With this setup my phone has google pay working.
  - m-p-3 7y ago
    Didn't block me on my LG G3 on Lineage OS, which doesn't come rooted by default.
- shpx 7y ago
  You could also buy a Pixel.
dvfjsdhgfv 7y ago
This is way better than any iPhone ad for an informed customer. Until Librem 5 becomes a reality, that is.

54 points by mrzool 7y ago

deleted 7y ago

[deleted]

Interesting paper. I didn't fully read it yet, but according to the figures : - Samsung looks worst than any other vendors (incl. Huawei) about permissions granted to pre-installed apps - Apps probably set many hidden cookies and identifiers in logs, possibly share information with other apps and bypassing permissions ? Quick note : - figure 1 is not much readable - figure 3 looks broken or misaligned

Iolaum 7y ago

I skimmed through the paper. I m thinking of keeping it to give it to anyone who asks me why I bother replacing stock ROMs with LineageOS on my devices.

oil25 7y ago
Agreed. Another satisfied LineageOS (Nexus 6P) user here. Huge thanks to any devs that might be reading this. Our intimate private data is not a commodity!
dfrage 7y ago
Just make sure the whole combo can call your country's emergency number: https://news.ycombinator.com/item?id=19479636 https://news.ycombinator.com/item?id=19479636 The Reddit link describes the the details for scheduling a 911 test call in the US, and as the link details, this failure has also been known to happen with stock phones.
1023bytes 7y ago
Unfortunately installing a custom ROM voids Google's SafetyNet, which stops many important apps from working, like Google Pay, Netlix, Snapchat and a ton of banking apps. Before this was a thing I used a custom ROM on every device, but now it's quite difficult.
- phishfi 7y ago
  Magisk fixes this problem, though. Most users I know who run custom ROMs also install Magisk to allow those apps to install and run without issue.
- Iolaum 7y ago
  Not really, It depends on your ROM. As a rule of a thumb if you install pure lineageOS+openGAPPS+fdroidPriviligedExtension you will have a working safetyNet. That means no root module (but you can get root by enabling adb if you really want it, e.g. for GSAM battery monitor I give it the battery stats permission from adb). With this setup my phone has google pay working.
- m-p-3 7y ago
  Didn't block me on my LG G3 on Lineage OS, which doesn't come rooted by default.
shpx 7y ago
You could also buy a Pixel.

dvfjsdhgfv 7y ago

This is way better than any iPhone ad for an informed customer. Until Librem 5 becomes a reality, that is.