Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”

  • AWittyUsername@lemmy.world
    link
    fedilink
    English
    arrow-up
    17
    ·
    20 hours ago

    Google says that SafetyCore “provides on-device infrastructure for securely and privately performing classification to help users detect unwanted content

    Cheers Google but I’m a capable adult, and able to do this myself.

    • throwback3090@lemmy.nz
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      6
      ·
      edit-2
      24 hours ago

      graphene folks have a real love for the word misinformation (and FUD, and brigading). That’s not you under there👻, Daniel, is it?

      After 5 years of his antics hateful bullshit lies, I think I can genuinely say that word triggers me.

      • loics2@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        ·
        21 hours ago

        Have you even read the article you posted? It mentions these posts by GrapheneOS

      • teohhanhui@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        2
        ·
        1 day ago

        Please, read the links. They are the security and privacy experts when it comes to Android. That’s their explanation of what this Android System SafetyCore actually is.

    • danciestlobster@lemm.ee
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      1
      ·
      1 day ago

      I also reported it as hostile and inappropriate. I am sure Google will do fuck all with that report but I enjoy being petty sometimes

  • DigitalDilemma@lemmy.ml
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    3
    ·
    1 day ago

    More information: It’s been rolling out to Android 9+ users since November 2024 as a high priority update. Some users are reporting it installs when on battery and off wifi, unlike most apps.

    App description on Play store: SafetyCore is a Google system service for Android 9+ devices. It provides the underlying technology for features like the upcoming Sensitive Content Warnings feature in Google Messages that helps users protect themselves when receiving potentially unwanted content. While SafetyCore started rolling out last year, the Sensitive Content Warnings feature in Google Messages is a separate, optional feature and will begin its gradual rollout in 2025. The processing for the Sensitive Content Warnings feature is done on-device and all of the images or specific results and warnings are private to the user.

    Description by google Sensitive Content Warnings is an optional feature that blurs images that may contain nudity before viewing, and then prompts with a “speed bump” that contains help-finding resources and options, including to view the content. When the feature is enabled, and an image that may contain nudity is about to be sent or forwarded, it also provides a speed bump to remind users of the risks of sending nude imagery and preventing accidental shares. - https://9to5google.com/android-safetycore-app-what-is-it/

    So looks like something that sends pictures from your messages (at least initially) to Google for an AI to check whether they’re “sensitive”. The app is 44mb, so too small to contain a useful ai and I don’t think this could happen on-phone, so it must require sending your on-phone data to Google?

  • perestroika@lemm.ee
    link
    fedilink
    English
    arrow-up
    6
    ·
    1 day ago

    The countdown to Android’s slow and painful death is already ticking for a while.

    It has become over-engineered and no longer appealing from a developer’s viewpoint.

    I still write code for Android because my customers need it - will be needing for a while - but I’ve stopped writng code for Apple’s i-things and I research alternatives for Android. Rolling my own environment with FOSS components on top of Raspbian looks feasible already. On robots and automation, I already use it.

      • perestroika@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        18 hours ago

        In my experience, the API has iteratively made it ever harder for applications to automatically perform previously easy jobs, and jobs which are trivial under ordinary Linux (e.g. become an access point, set the SSID, set the IP address, set the PSK, start a VPN connection, go into monitor / inject mode, access an USB device, write files to a directory of your choice, install an APK). Now there’s a literal thicket of API calls and declarations to make, before you can do some of these things (and some are forever gone).

        The obvious reason is that Google tries to protect a billion inexperienced people from scammers and malware.

        But it kills the ability to do non-standard things, and the concept of your device being your own.

        And a big problem is that so many apps rely on advertising for its income stream. Spying a little has been legitimized and turned into a business under Android. To maintain control, the operating system then has to be restrictive of apps. Which pisses off developers who have a trusting relationship with their customer and want their apps to have freedom to operate.

        • throwback3090@lemmy.nz
          link
          fedilink
          English
          arrow-up
          2
          ·
          14 hours ago

          I suppose that’s all true, I’d say more “following apples lead on locking things down” than over engineered, but 🍅🍅.

          I find myself avoiding the whole root business, I do want my mobile device to be fairly locked down. But I also use alternative OSs and app stores to avoid 90% of the garbage (stuff I can’t avoid I put in work profile, like I still need google maps).

          It works for me, but on the front of this complexity driving away devs I don’t really see a viable alternative. Base Linux isn’t secure enough for what we put on these little computers. I mean you’ve still got tons of influential people arguing you shouldn’t use secureboot or a tpm as if leaving your whole computer unsecured is better than the indignity of using a non-free bios.

    • moncharleskey@lemmy.zip
      link
      fedilink
      English
      arrow-up
      35
      ·
      2 days ago

      I struggle with GitHub sometimes. It says to download the apk but I don’t see it in the file list. Anyone care to point me in the right direction?

      • Fushuan [he/him]@lemm.ee
        link
        fedilink
        English
        arrow-up
        34
        ·
        2 days ago

        There’s an app called obtainium that let’s you link the main page of github apps and manages both the download, the instalation and the updates of those apps.

        Great if you want the latest software directly from the source.

        • blazeknave@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          2 days ago

          I didn’t understand the value of fdroid all since it feels like a web wrapper. Thanks to you finally pulled the trigger on Obtanium. Omg that’s simple af

          • FauxLiving@lemmy.world
            link
            fedilink
            English
            arrow-up
            7
            ·
            2 days ago

            It’s a web wrapper that points to a non-Google software repo.

            The non-Google software repo is the important part, the interface can be bad as long as it can install software.

            I use Obtanium too, but fDroid is my first stop when I need an app. Google’s Play store is a last resort.

          • pirat@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            2 days ago

            Droid-ify and Neo-Store are alternative clients for the F-Droid repository (and other repos), that you may like better than the official client. But yeah, Obtainium is indeed simple and it’s powerful if you already know exactly which app you want to install (rather than searching for relevant options in some repositories).

      • rocci@lemmy.ml
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 days ago

        At the bottom of the page, it says releases - click on the release that’s there, and that’s where you’ll find the all.

        I haven’t been able to install it though due to signature mismatch, I’m not sure why…

        • moncharleskey@lemmy.zip
          link
          fedilink
          English
          arrow-up
          5
          ·
          2 days ago

          Awesome, thanks! You didn’t install a previous version did you? Apparently you can’t update to the current version due to the signature issue.

    • Druid@lemmy.zip
      link
      fedilink
      English
      arrow-up
      8
      ·
      2 days ago

      Amazing, thank you. I have uninstalled this bs twice now and have so far been spared by another force install. I hope this works

  • CaptKoala@lemmy.ml
    link
    fedilink
    English
    arrow-up
    15
    ·
    2 days ago

    Thanks for bringing this up, first I’ve heard of it. Not present on my GrapheneOS pixel, present on stock.

    I suppose I should encourage pixel owners to switch from stock to graphene, I know which decide I rather spend time using. GrapheneOS one of course.

    • Maxxie@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      1 day ago

      I’m traumatized by trying to use banking apps on lineage… don’t think I’ll risk it until I get a backup phone

    • Flying_Hellfish@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      I’ve looked into it.l briefly. Did you have any issues switching? I’m concerned about how some apps I need would function.

      • CaptKoala@lemmy.ml
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 days ago

        I did a fair amount of research before the switch to find alternatives to Google services, some I’ve replaced, others I felt were too much of a hassle for my phone usage.

        I’ve kept my original pixel stock, the hardest part about switching this one over was plugging it in and following the instructions.

        I’m hoping to get rid of my stock OS pixel soon, it would appear my bank hasn’t blocked it’s app on Graphene, unlike Uber.

        For the rest I’ll either buy a cheap af shitbox to use purely for banking and Uber (if it comes to that).

        If you’ve any other questions I’m happy to help find then answers with you, feel free to DM me.

    • ilinamorato@lemmy.world
      link
      fedilink
      English
      arrow-up
      20
      ·
      edit-2
      2 days ago

      The Firefox Phone should’ve been a real contender. I just want a browser in my pocket that takes good pictures and plays podcasts.

      • StefanT@lemmy.world
        link
        fedilink
        English
        arrow-up
        16
        arrow-down
        1
        ·
        2 days ago

        Unfortunately Mozilla is going the enshittification route more and more. Or good in this case that the Firefox Phone did not take of.

      • Ledericas@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 day ago

        too bad firefox is going through the way like google, they are updating thier privacy terms of usage.

        • ilinamorato@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 day ago

          Yep. I’m furious at Mozilla right now. But when the Firefox Phone was in development, they were one of the web’s heroes.

          • Ledericas@lemm.ee
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 day ago

            it says its only for LLM? as long as they dont try to expand the “privacy” in any case i download alternatives to the browsers anyways.

    • ad_on_is@lemm.eeOP
      link
      fedilink
      English
      arrow-up
      30
      ·
      2 days ago

      if there was something that could run android apps virtualized, I’d switch in a heartbeat

    • DegenerateSupreme@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      I just gave up and pre-ordered the Light Phone 3. Anytime I truly need a mobile app, I can just use an old iPhone and a WiFi connection.

  • LotrOrc@lemmy.world
    link
    fedilink
    English
    arrow-up
    16
    ·
    2 days ago

    I just un-installed it

    Anyone know what Android System Intelligence does? Should that be un-installed as well?

    • starman2112@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      1 day ago

      Jesus Christ they’re like bed bugs

      Is it too much to ask that my phone only contain the shit that makes it work, and not anything else?

      • A_Random_Idiot@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        1 day ago

        Its a classic example of using “BUT THE CHILDREN” to be invasive dickheads.

        And it immediately reminds me of the story of the guy whose kid had a rash in the diaper area during covid, and the pediatrician requested pictures to remotely diagnose and treat, which google flagged as child pornography and called the cops on him, and banned/locked him out of everything (phone number, emails, pictures, etc etc) because he had everything on google.

        and no amount of the police, or even doctor, insisting the pictures were medical necessity and not child pornography would convince google to restore his acount or even let him recover his number/email/pictures/etc.

        • starman2112@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 day ago

          The fact that Google refused to restore his account even after the police that they called said there was no child porn pisses me off to no end. They are officially allowed to close your account for no reason other than they don’t like you.

          • A_Random_Idiot@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            edit-2
            22 hours ago

            not only refused to restore the account, but still insisted he was a pedophile producing child pornography despite the cops and doctors and every other authority involved insisting he wasnt, and that the images were medically necessary, and refuse to even give/let him get a backup of all his family pictures, emails, etc.

            and theres gonna be a lot more of it once this stupid invasive spyware rolls out and gets going.

            If our parents and grandparents photos were digitized, they’d all probably be labled child porn producers, because almost every parent/grandparent/etc has some picture of their newborn getting a sink bath or some other completely harmless, and otherwise normal photo.

            and I think its so they can artificially inflate their numbers. They arent doing shit to stop actual child exploitation, so they hammer hard on this shit so they can make a big show of “cracking down and stopping” it.

  • latenightnoir@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 day ago

    Great, it’ll have to plow through ~30GB of 1080p recordings of darkness and my upstairs neighbors living it up in the AMs. And nothing else.

    • x4740N@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      9 hours ago

      Apparently I’m a beta tester for it, don’t recall signing up for beta tests with it

    • hector@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      30
      ·
      2 days ago

      Thanks for the link, this is impressive because this really has all the trait of spyware; apparently it installs without asking for permission ?

      • Ledericas@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 day ago

        yea i found it as soon as this article said it was on your phone spying on you, ALSO many people, like myself noticed the battery draining pretty fast too, this is probalby the cause, if it installs without your knowledge, i doubt the app is excluded from your "app battery usage logs to, like it doesnt show up how much power its using.

    • Raiderkev@lemmy.world
      link
      fedilink
      English
      arrow-up
      16
      ·
      2 days ago

      Thanks. Uninstalled. Not that it matters, they already got what they wanted from me most likely.