this post was submitted on 27 Feb 2025
987 points (96.7% liked)

Technology

63376 readers
4586 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”

(page 3) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 36 points 22 hours ago (2 children)

I didn't have it in my app drawer but once I went to this link, it showed as installed. I un-installed it ASAP.

https://play.google.com/store/apps/details?id=com.google.android.safetycore&hl=en-US

load more comments (2 replies)
[–] [email protected] 41 points 22 hours ago

People don't seem to understand the risks presented by normalizing client-side scanning on closed source devices. Think about how image recognition works. It scans image content locally and matches to keywords or tags, describing the person, objects, emotions, and other characteristics. Even the rudimentary open-source model on an immich deployment on a Raspberry Pi can process thousands of images and make all the contents searchable with alarming speed and accuracy.

So once similar image analysis is done on a phone locally, and pre-encryption, it is trivial for Apple or Google to use that for whatever purposes their use terms allow. Forget the iCloud encryption backdoor. The big tech players can already scan content on your device pre-encryption.

And just because someone does a traffic analysis of the process itself (safety core or mediaanalysisd or whatever) and shows it doesn't directly phone home, doesn't mean it is safe. The entire OS is closed source, and it needs only to backchannel small amounts of data in order to fuck you over.

Remember the original justification for clientside scanning from Apple was "detecting CSAM". Well they backed away from that line of thinking but they kept all the client side scanning in iOS and Mac OS. It would be trivial for them to flag many other types of content and furnish that data to governments or third parties.

[–] [email protected] 9 points 22 hours ago (1 children)

Hope they like all my dick pics

load more comments (1 replies)
[–] [email protected] 2 points 22 hours ago

Interestingly I don't have it on my stock samsung phone. I haven't updated it since oneui 6. Is safetycore installed by update or by GMS?

[–] [email protected] 3 points 22 hours ago

And interestingly enough my phone crapped out on this post. But at least I was still able to read the the post.

[–] [email protected] 1 points 22 hours ago

Samsung lets me uninstall it now problem.

[–] [email protected] 6 points 23 hours ago (5 children)

Seems to be innocuous, but there's no harm in removing it. Next update, it'll be returned, so the better solution long-term will be (if you're rooted) is to use an application to freeze it, which effectively disables it and it should survive and update. If you delete the app, a new update will put it back.

[–] [email protected] 2 points 22 hours ago (3 children)

I don't see it on the app store to remove anymore

load more comments (3 replies)
[–] [email protected] 5 points 22 hours ago (5 children)

You can freeze using ADB/Shizuku as well. No root needed.

[–] [email protected] 1 points 22 hours ago (1 children)

how to freeze it on the app?

load more comments (1 replies)
load more comments (4 replies)
[–] [email protected] -1 points 22 hours ago (2 children)

or just disable play store and use an alternative store like aurora.

Then it'll never get installed in the first place.

load more comments (2 replies)
load more comments (2 replies)
[–] [email protected] 15 points 23 hours ago (1 children)

Well then I hope they like seeing my butthole.

[–] [email protected] 13 points 23 hours ago

My older brother swipes through your phone's photos without asking, so I put some colonoscopy pictures in there. He hasn't tried to look at photos on my phone since.

Oh Google what have you done to yourself.

[–] [email protected] 4 points 23 hours ago

Jesus thanks for posting this. Found it on my LG ThinQ.

Anyone have a fairphone? Thoughts about it?

[–] [email protected] 2 points 23 hours ago

an app on all Android

not my android :)

BTW did anyone reverse engineer it? Or doing rn (I'm HTH)?

[–] [email protected] -2 points 1 day ago (3 children)

Seriously…. Why do people continue to buy their products? They’re seemingly one of the most invasive security risks one could be involved with.

[–] [email protected] -2 points 22 hours ago

Most people don't really know what that actually means, and they don't feel they have anything to hide from some nebulous corporate entity.

[–] [email protected] 7 points 1 day ago (1 children)

why, what do you recommend?

I mean you have just disclaime the whole android ecosystem, and the only other alternative is Apple, which is questionable if it's better.
and this would have even applied to my fairphone!
would have, if I didn't get rid of google services the day I got it.

[–] [email protected] 20 points 1 day ago (3 children)

Thanks for bringing this up, first I've heard of it. Not present on my GrapheneOS pixel, present on stock.

I suppose I should encourage pixel owners to switch from stock to graphene, I know which decide I rather spend time using. GrapheneOS one of course.

[–] [email protected] 3 points 23 hours ago (1 children)

I've got a Pixel 8 Pro and I'm currently using the stock OS. Anything in particular that you miss with Graphene OS?

load more comments (1 replies)
[–] [email protected] 3 points 1 day ago (2 children)

I've looked into it.l briefly. Did you have any issues switching? I'm concerned about how some apps I need would function.

[–] [email protected] 3 points 23 hours ago (1 children)

I did a fair amount of research before the switch to find alternatives to Google services, some I've replaced, others I felt were too much of a hassle for my phone usage.

I've kept my original pixel stock, the hardest part about switching this one over was plugging it in and following the instructions.

I'm hoping to get rid of my stock OS pixel soon, it would appear my bank hasn't blocked it's app on Graphene, unlike Uber.

For the rest I'll either buy a cheap af shitbox to use purely for banking and Uber (if it comes to that).

If you've any other questions I'm happy to help find then answers with you, feel free to DM me.

[–] [email protected] 1 points 22 hours ago

Uber works on GrapheneOS

load more comments (1 replies)
load more comments (1 replies)
load more comments
view more: ‹ prev next ›