Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
1. All posts must be relevant to Android devices/operating system.
2. Posts cannot be illegal or NSFW material.
3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.
4. Non-whitelisted bots will be banned.
5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.
6. Memes are not allowed to be posts, but are allowed in the comments.
7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.
8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.
Community Resources:
We are Android girls*,
In our Lemmy.world.
The back is plastic,
It's fantastic.
*Well, not just girls: people of all gender identities are welcomed here.
Our Partner Communities:
Xiaomi doesn't have an app store. It's possible that you're tripping off the "counterfeit app detection" and it's sending a request to Google Play and installs from there.
This mechanism even tho inconvenient for you is a life saver in countries with lower tech literacy because malware versions of popular massanger apps were very widespread
Just install a new ROM.
That's the plan.
I remember times when miui was genuinely good, not bloated, well designed. Nowadays I think it's the most bloated android skin.
these folks are legends. get your roms here - https://xiaomi.eu/community/
Thanks, I'm going to look at a rom soon, it's my main device though and I don't have a good track record when it comes to not bricking phones 🤣
Also there is the bit about unlocking the bootloader, I heard it's not straightforward.
I have a PoCo F3, basically a xiaomi, and I disabled all their crap, especially security/avast
Can you check the package names of the apps? On F-droid website you can see it in the url, for example https://f-droid.org/packages/com.jens.automation2/ the code is com.jens.automation2. You should see the same name on the page of the app in settings if you scroll down.
~~If the names are the same than nothing nefarious should be happening behind the scenes.~~
Unknown source can mean it's not from a built-in store. If you would be rooted and install the F-droid Privileged Extension it should show up there correctly. Maybe they just block reading this kind of info from F-droid.
On common Xiaomi phones the rom cooking community is very vivid usually, you can just replace the shitty default rom really easily. Start to look for roms and tutorials about rooting on xdaforums
The package names would not be different if it's installing a different (possibly malevolent) version of the same app.
Only the signature and other metadata would be different, but if the package name were different it would show as a different app entirely in places like f-droid, not as installed from elsewhere. It would show the intended app as not installed at all if the package name of the Xiaomi version wasn't the same.
Is it possible the scanner is just intercepting the install request, then running the apk installer from the scanner afterwards? (so Fdroid wasn't the program installing it, but it's still the same APK)
If it were the same APK, f-droid wouldn't later see a signature mismatch.
XOR...
Xaiomi is installing versions with Microsoft-style spyware/malware in 'em..
Same as ISP's altering the web-pages that people view, for their own commercial-reasons...
Molesting-the-user seems to be THE SurveillanceCapitalism paradigm, in the Enshittocene..
I'm not competent to do the decompilation/analysis required to discover if your new "helpful" versions are spyware/malware, but I'd bet they are not as clean as the original versions are.
Avast has been caught being treason-against-privacy, recently, too, with their "privacy" app that was actually a trojan to enable Avast to sell privacy-information for profit..
( last few weeks in the Tech news, here on Lemmy.world, iirc )
You might want to ask the MalwareBytes people to look into it?
Do you have a source in terms of the ISPs altering websites? Would love to mention that in my thesis.
I heard about the avast thing, but how are isp's modifying web pages, that shouldn't be possible with with https, right?
Without further evidence, I'd assume they just want to boost usage of their App Store. Since they're the O.E.M. of the phone and developer of the installed Android Rom, they could build in a back door in a much less conspicuous way.
Yeah I'm going with they're innocent. Just the UI with the install button and no explanation is not cool.