3 ms·

> can be re-enabled fairly easily Right, but remotely? If the package is disabled, and not re-enabled by third parties, and this operation can disable spyware

by mdp2021 2y ago

> can be re-enabled fairly easily Right, but remotely? If the package is disabled, and not re-enabled by third parties, and this operation can disable spyware... As said, I do not quite know yet how effective this can be in practice.

hollow-moe 2y ago
you can safely assume google has full remote access to your android devices [0] [0] https://www.bbc.com/news/technology-45546276 https://www.bbc.com/news/technology-45546276
- mdp2021 2y ago
  And when Apple did it with the iPhone "1" they said in press conference that "we decided that if we did not put the feature in, we would later regret it". The (BBC) article confirms that some Android implementations allow remote access from Google. The question remains, how much can `pm uninstall --user 0` limit the unwanted. For example, that remote access to the configurations the article discusses.
  - mattl 2y ago
    Can you provide a source for that quote? I can’t seem to find it.
    - jml78 2y ago
      I am not the person you are replying to but it is blantantly obvious that IF you have google play services on your phone, they have full access to your device. They have accidentally shown their hand previously by turning on battery saver mode on everyone's phone on accident. https://tech.hindustantimes.com/tech/news/google-can-remotely-change-your-device-s-settings-and-it-did-for-some-users-story-jerMVfd9kD19YbFruY4bII.html#:~:text=This%20was%20an%20internal%20experiment,said%20in%20a%20Reddit%20post https://tech.hindustantimes.com/tech/news/google-can-remotel.... They can try to say it is limited to whatever, but I think all the smoke means there is fire. I used to exclusively use Android devices until this incident happened. At the end of the day, I realize that even if I buy a google phone, I am still the product. I do not believe it is the same with Apple. Do I trust apple? No way, but I feel they have more incentive to not treat my data as a product to be sold and my device to be used to spy on me.
kelnos 2y ago
> Right, but remotely? It doesn't matter; the attack described in the article already requires physical access. Regardless, I'm sure Google has hooks that allow them to remotely enable/disable apps on the phone via Play Services, so... yes, remotely.
- mdp2021 2y ago
  If it were just the Google Play Services, disabling that would disable remote enabling of applications - it would also make some applications unusable. One solution to the remote enabling of apps could be a "watchdog" monitor that checks relevant statuses - so you will know if a past user decision got overridden. Anyway, we need a database profiling Android software with relevance to security and privacy. There must be something around.
  - transpute 2y ago
    > we need a database profiling Android software with relevance to security and privacy. GrapheneOS maintains a list for Pixel phones: https://github.com/GrapheneOS/adevtool/commit/9c5ac945f https://github.com/GrapheneOS/adevtool/commit/9c5ac945f https://news.ycombinator.com/item?id=41264936 https://news.ycombinator.com/item?id=41264936

hollow-moe 2y ago

you can safely assume google has full remote access to your android devices [0] [0] https://www.bbc.com/news/technology-45546276 https://www.bbc.com/news/technology-45546276

mdp2021 2y ago
And when Apple did it with the iPhone "1" they said in press conference that "we decided that if we did not put the feature in, we would later regret it". The (BBC) article confirms that some Android implementations allow remote access from Google. The question remains, how much can `pm uninstall --user 0` limit the unwanted. For example, that remote access to the configurations the article discusses.
- mattl 2y ago
  Can you provide a source for that quote? I can’t seem to find it.
  - jml78 2y ago
    I am not the person you are replying to but it is blantantly obvious that IF you have google play services on your phone, they have full access to your device. They have accidentally shown their hand previously by turning on battery saver mode on everyone's phone on accident. https://tech.hindustantimes.com/tech/news/google-can-remotely-change-your-device-s-settings-and-it-did-for-some-users-story-jerMVfd9kD19YbFruY4bII.html#:~:text=This%20was%20an%20internal%20experiment,said%20in%20a%20Reddit%20post https://tech.hindustantimes.com/tech/news/google-can-remotel.... They can try to say it is limited to whatever, but I think all the smoke means there is fire. I used to exclusively use Android devices until this incident happened. At the end of the day, I realize that even if I buy a google phone, I am still the product. I do not believe it is the same with Apple. Do I trust apple? No way, but I feel they have more incentive to not treat my data as a product to be sold and my device to be used to spy on me.

kelnos 2y ago

> Right, but remotely? It doesn't matter; the attack described in the article already requires physical access. Regardless, I'm sure Google has hooks that allow them to remotely enable/disable apps on the phone via Play Services, so... yes, remotely.

mdp2021 2y ago
If it were just the Google Play Services, disabling that would disable remote enabling of applications - it would also make some applications unusable. One solution to the remote enabling of apps could be a "watchdog" monitor that checks relevant statuses - so you will know if a past user decision got overridden. Anyway, we need a database profiling Android software with relevance to security and privacy. There must be something around.
- transpute 2y ago
  > we need a database profiling Android software with relevance to security and privacy. GrapheneOS maintains a list for Pixel phones: https://github.com/GrapheneOS/adevtool/commit/9c5ac945f https://github.com/GrapheneOS/adevtool/commit/9c5ac945f https://news.ycombinator.com/item?id=41264936 https://news.ycombinator.com/item?id=41264936