• @LWD@lemm.ee
      link
      fedilink
      English
      334 days ago

      Google Play is the part of Android that is most threatening. On many devices, you can’t disable it without ADB trickery. And it delegates permissions to apps in total subversion of the permission system we were allegedly being kept “safe” by.

  • Ulrich
    link
    fedilink
    English
    65
    edit-2
    4 days ago

    and since Advanced Protection blocks unknown apps, you won’t be able to side-load

    Ah, there it is. It’s a good decision while they’re being repeatedly investigated for being anti-competitive.

  • @LordCrom@lemmy.world
    link
    fedilink
    English
    224 days ago

    Most features here let Google scan and evaluate what you do on the web, messages, and apps.

    They say it helps security, but of course it assures those features are on letting them suck in more data about the person.

    A company like Google doesn’t do something out of the kindness of their hearts, they do it for profit

        • @sykaster@feddit.nl
          link
          fedilink
          English
          34 days ago

          It’s not weird. When a small company does something like this they lose users and it could damage them. Google doesn’t care because they know people will use them no matter what.

        • Engywook
          link
          fedilink
          English
          24 days ago

          I meant that literally every other company is after the money, not only Google or big ones.

          • @MonkderVierte@lemmy.zip
            link
            fedilink
            English
            2
            edit-2
            4 days ago

            Depends on the form of the company. German space, we have GmbH, there’s nonprofit too. And some “normal” ones with a social vein.

            But as soon as they get trade market, they get money only, usually.

  • @Septimaeus@infosec.pub
    link
    fedilink
    English
    134 days ago

    I’ve been checking out the localhost tracking vulnerability and there’s something I can’t work out: it’s not even a terribly obscure or convoluted exploit, especially Yandex’s implementation that’s been chugging for more than 8 years over basic HTTP. It’s just a glaring sandboxing workaround that’s been exclusive to this OS for more than a decade.

    No matter how many ways I look at it, I haven’t come up with a reasonable explanation for how it was ignored, by demonstrably capable engineers, unless Google itself had use for it in the first place. And that fits a pattern of selective competence in information security that they just can’t seem to quit.

    In short it’s the data collection backdoors they leave themselves that defeat the otherwise top-tier security of their consumer offerings, and it’s why I’ll probably never trust anything they’ve touched until I’ve taken it apart and put it back together again.

    So no, you probably shouldn’t use it. Trusting the privacy or security claims of any adtech company will always be a mistake.

    • adr1an
      link
      fedilink
      English
      117 hours ago

      I’ll probably never trust anything they’ve touched until I’ve taken it apart and put it back together again.

      Me too. But the vast majority of users need guardrails, and have a different threat model. Even those that also care about privacy, if they just want a solution that comes by default, this adtech ‘fake’ or ‘superficial’ solution does provide something. And anything is more than nothing.