4 ms·

It doesn't really matter who's involved, the security model in android is extremely user hostile. Many organizations are given super user access on device and t

by swiley 6y ago

It doesn't really matter who's involved, the security model in android is extremely user hostile. Many organizations are given super user access on device and the end user isn't. Only one of these needs to be poorly behaved (not even selling ads) for the device to be full of unremovable malware. There's definitely a social problem here, but I think for once people HN are underestimating the importance of a technical problem.

mschuster91 6y ago
> Many organizations are given super user access on device and the end user isn't. That depends. Assuming an uncorrupted chain of delivery between you and the manufacturer, if you're running a vanilla AOSP, the only organization having root access is Google and you. Even with Samsung and other manufacturers, they are the only additional party whose packages have admin rights. The situation is more nasty with devices bought/leased from a carrier because these insist on preloading all kinds of crapware - which is why I would strictly recommend everyone to work out their own financing and buy a stock device independently from a carrier. Chances are it's gonna be cheaper in the long run anyway.
- phh 6y ago
  > Even with Samsung and other manufacturers, they are the only additional party whose packages have admin rights. It depends on what you call "admin rights", but from my point of view you're wrong. On Samsung devices, DT Ignite (Israel-based ad company) is preinstalled, which has the rights to install new apps. Getting the right to install new apps means you can get any user permission. (like silently access camera, microphone, or screen capture to capture you typing your password)
- jsjohnst 6y ago
  > The situation is more nasty with devices bought/leased from a carrier because these insist on preloading all kinds of crapware Apple has their own issues, but at least the above carrier crapware issue isn’t one of them on iOS and never has been.
intricatedetail 6y ago
Company selling phone should by law be required to hand over any keys to the user. User should be able to change any aspect of the os or even delete it if they wish. We need to end the abuse of Google and Apple.
- deleted 6y ago
  [deleted]

by swiley 6y ago

mschuster91 6y ago

> Many organizations are given super user access on device and the end user isn't. That depends. Assuming an uncorrupted chain of delivery between you and the manufacturer, if you're running a vanilla AOSP, the only organization having root access is Google and you. Even with Samsung and other manufacturers, they are the only additional party whose packages have admin rights. The situation is more nasty with devices bought/leased from a carrier because these insist on preloading all kinds of crapware - which is why I would strictly recommend everyone to work out their own financing and buy a stock device independently from a carrier. Chances are it's gonna be cheaper in the long run anyway.

phh 6y ago
> Even with Samsung and other manufacturers, they are the only additional party whose packages have admin rights. It depends on what you call "admin rights", but from my point of view you're wrong. On Samsung devices, DT Ignite (Israel-based ad company) is preinstalled, which has the rights to install new apps. Getting the right to install new apps means you can get any user permission. (like silently access camera, microphone, or screen capture to capture you typing your password)
jsjohnst 6y ago
> The situation is more nasty with devices bought/leased from a carrier because these insist on preloading all kinds of crapware Apple has their own issues, but at least the above carrier crapware issue isn’t one of them on iOS and never has been.

intricatedetail 6y ago

Company selling phone should by law be required to hand over any keys to the user. User should be able to change any aspect of the os or even delete it if they wish. We need to end the abuse of Google and Apple.

deleted 6y ago
[deleted]