3 ms·

I am curious if never logging in to Google while using an Android precludes one from being susceptible to this. Generally you are unable to reach or interact wi

by 0des 5y ago

I am curious if never logging in to Google while using an Android precludes one from being susceptible to this. Generally you are unable to reach or interact with the app store without first registering a Google account on the device, and accepting various EULAs. EDIT: Thanks to the commenters below, it appears not participating in the app store ecosystem does not safeguard someone from this. Quite concerning.

aj3 5y ago
Reddit comment explains that the software that handles app sideloading gets preinstalled by carriers: https://www.reddit.com/r/androiddev/comments/q4nltn/comment/hg0blt5/ https://www.reddit.com/r/androiddev/comments/q4nltn/comment/...
- prismatix 5y ago
  So does this mean that if you purchase an unlocked phone directly from the manufacturer rather than your service provider, you shouldn't have this problem?
  - washadjeffmad 5y ago
    Or any device with an unlocked bootloader that supports popular custom firmware like LineageOS, GrapheneOs, or CalyxOS.
FastEatSlow 5y ago
Doesn't look like it, this is using the "On-Device Platform" by Digital Turbine, which is used to preload bloatware onto phones. It's pre-installed on many phones for ad money. Based off the "SingleTap" demo video, it even works in a browser on an ad, which is a bit scary. According to the partners list, phone/provider brands affected are: Verizon, At&T, Samsung, LG, Xiaomi, Motorola, Panasonic, Acer, T Mobile, Cricket, US Cellular, America movil, Tracfone, Telfonica and Tim Gruppo Tim.
cookiengineer 5y ago
In addition to the sibling commenter: AdMob SDK had support for ultrasonic data exchange for a while now, and it's heavily used in Europe while TV ads are running. Safeguarding your phone from network communication wouldn't be enough, as you would have to prevent audio communication as well - which kinda defeats the purpose of it being a phone. I'd recommend to use LineageOS or Graphene on any Android smartphone. Use RethinkDNS [1] as firewall and AppWarden [2] to identify spyware. You can also double check the reports page of the exodus prvcy project [3]. [1] https://rethinkdns.com/ https://rethinkdns.com/ [2] https://gitlab.com/AuroraOSS/AppWarden/-/releases https://gitlab.com/AuroraOSS/AppWarden/-/releases [3] https://reports.exodus-privacy.eu.org/en/ https://reports.exodus-privacy.eu.org/en/

by 0des 5y ago

aj3 5y ago

Reddit comment explains that the software that handles app sideloading gets preinstalled by carriers: https://www.reddit.com/r/androiddev/comments/q4nltn/comment/hg0blt5/ https://www.reddit.com/r/androiddev/comments/q4nltn/comment/...

prismatix 5y ago
So does this mean that if you purchase an unlocked phone directly from the manufacturer rather than your service provider, you shouldn't have this problem?
- washadjeffmad 5y ago
  Or any device with an unlocked bootloader that supports popular custom firmware like LineageOS, GrapheneOs, or CalyxOS.

FastEatSlow 5y ago

Doesn't look like it, this is using the "On-Device Platform" by Digital Turbine, which is used to preload bloatware onto phones. It's pre-installed on many phones for ad money. Based off the "SingleTap" demo video, it even works in a browser on an ad, which is a bit scary. According to the partners list, phone/provider brands affected are: Verizon, At&T, Samsung, LG, Xiaomi, Motorola, Panasonic, Acer, T Mobile, Cricket, US Cellular, America movil, Tracfone, Telfonica and Tim Gruppo Tim.

cookiengineer 5y ago

In addition to the sibling commenter: AdMob SDK had support for ultrasonic data exchange for a while now, and it's heavily used in Europe while TV ads are running. Safeguarding your phone from network communication wouldn't be enough, as you would have to prevent audio communication as well - which kinda defeats the purpose of it being a phone. I'd recommend to use LineageOS or Graphene on any Android smartphone. Use RethinkDNS [1] as firewall and AppWarden [2] to identify spyware. You can also double check the reports page of the exodus prvcy project [3]. [1] https://rethinkdns.com/ https://rethinkdns.com/ [2] https://gitlab.com/AuroraOSS/AppWarden/-/releases https://gitlab.com/AuroraOSS/AppWarden/-/releases [3] https://reports.exodus-privacy.eu.org/en/ https://reports.exodus-privacy.eu.org/en/