Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”

  • Event_Horizon@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 days ago

    It didn’t appear in my apps list so I thought it wasn’t installed. But when I searched for the app name it appears. So be aware.

      • Ledericas@lemm.ee
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        you can look it up on your app managment settings too, search for it there.

      • viking@infosec.pub
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        Play Store, it doesn’t show in local search results, but they list it as installed.

        • A_A@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          10 days ago

          Even worse, i found this comment in the app store and it did the same on my device :

          Installed automatically without my knowledge, no notification, only found it because of a friend’s post, and even then, you only see it through a link, it doesn’t come up in your app list or a search of the Google play store. I thought it felt like my battery was draining a little quicker too, which is apparently also something noticed in connection to having this app. Uninstalling.

          The app can be found here :
          https://play.google.com/store/apps/details?id=com.google.android.safetycore
          .

          • viking@infosec.pub
            link
            fedilink
            English
            arrow-up
            0
            ·
            10 days ago

            Oh right, maybe I noticed because of Storage Isolation, that’s an app which allows you to restrict folder access of other apps, and it prompts me to select actions for every newly installed app. So it casually prompts me whenever google pushes a new, hidden installation.

          • Ledericas@lemm.ee
            link
            fedilink
            English
            arrow-up
            0
            ·
            10 days ago

            i was able to find it on my oneplus, and i also noticed, why is my oneplus 12r draining so fast?

  • Xanza@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 days ago

    Seems to be innocuous, but there’s no harm in removing it. Next update, it’ll be returned, so the better solution long-term will be (if you’re rooted) is to use an application to freeze it, which effectively disables it and it should survive and update. If you delete the app, a new update will put it back.

      • Xanza@lemm.ee
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        If you freeze via non-room methods, updating the apk will re-enable it. So it’s the same situation as just removing the apk–it’ll basically re-enable itself.

        • jayandp@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          0
          ·
          10 days ago

          I’ve never had an app frozen through ADB get auto-updated by the Play Store or Google Services and get re-enabled because of it. An app with an update available will even disappear from the Update list if disabled, and in order to update it you have to enable it first.

          • Xanza@lemm.ee
            link
            fedilink
            English
            arrow-up
            0
            ·
            10 days ago

            Freezing an app in an non-root fashion doesn’t do anything special. It’s moved to a different location and is effectively “removed” from a runnable state. The OS shows it as disabled/removed, but the files are still there. Newer versions of android (14+) will recognize applications it thinks are necessary (like this one, from Google) are moved/disabled and will pull a new apk during the upgrade process. It effectively re-installs the app.

        • jayandp@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          0
          ·
          10 days ago

          Using ADB:

          adb shell pm disable-user --user 0 com.google.android.safetycore 
          

          If you have Shizuku and aShell/ShizuShell installed, then just run this command in aShell:

          pm disable-user --user 0 com.google.android.safetycore 
          

          Alternatively, for a GUI method, setup Shizuku and then use an app like Hail or Ice Box

      • Nobilmantis@feddit.it
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        Who would have thought the best security practice would turn out to be having devices too old to be updated with spyware? No jokes

  • PokerChips@programming.dev
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 days ago

    And interestingly enough my phone crapped out on this post. But at least I was still able to read the the post.

  • Wren@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 days ago

    Seriously…. Why do people continue to buy their products? They’re seemingly one of the most invasive security risks one could be involved with.

    • null@slrpnk.net
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      Most people don’t really know what that actually means, and they don’t feel they have anything to hide from some nebulous corporate entity.

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      why, what do you recommend? I mean you have just disclaime the whole android ecosystem, and the only other alternative is Apple, which is questionable if it’s better

      • Wren@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        I don’t have to recommend anything just because I’m asking why people are buying spyware tech.

        Just like I may not know the proper way to safely jump out of an airplane, but I do know a parachute is involved.

        A person asking why people do a thing that seems stupid isn’t obligated to solve the people.

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      why, what do you recommend?

      I mean you have just disclaime the whole android ecosystem, and the only other alternative is Apple, which is questionable if it’s better.
      and this would have even applied to my fairphone!
      would have, if I didn’t get rid of google services the day I got it.

      • Wren@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        I don’t have to recommend anything just because I’m asking why people are buying spyware tech.

        Just like I may not know the proper way to safely jump out of an airplane, but I do know a parachute is involved.

        A person asking why people do a thing that seems stupid isn’t obligated to solve the people.

  • YarHarSuperstar@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    What about the “Android System Intelligence” app that someone else mentioned here? I just realized I have that one. It sounds like it has the capabilities to spy and maybe even more.

      • YarHarSuperstar@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        11 days ago

        What do you mean by that? What I meant is that the functions, capabilities, and permissions it has could enable it to do so.

        • catloaf@lemm.ee
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          11 days ago

          Yeah, so do the rest of the system apps, and the OS itself. Why is everyone freaking out about this one all of a sudden? If you don’t trust the Google software running on your phone, you shouldn’t be using it in the first place.

  • Ilovethebomb@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    I’ve just given it the boot from my phone.

    It doesn’t appear to have been doing anything yet, but whatever.

    • throwback3090@lemmy.nz
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      10 days ago

      graphene folks have a real love for the word misinformation (and FUD, and brigading). That’s not you under there👻, Daniel, is it?

      After 5 years of his antics hateful bullshit lies, I think I can genuinely say that word triggers me.

      • teohhanhui@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        Please, read the links. They are the security and privacy experts when it comes to Android. That’s their explanation of what this Android System SafetyCore actually is.

      • loics2@lemm.ee
        link
        fedilink
        English
        arrow-up
        0
        ·
        10 days ago

        Have you even read the article you posted? It mentions these posts by GrapheneOS

    • dan@upvote.au
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      So is this really just a local AI model? Or is it something bigger? My S25 Ultra has the app but it hasn’t used any battery or data.

  • potentiallynotfelix@lemmy.fish
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 days ago

    Interestingly I don’t have it on my stock samsung phone. I haven’t updated it since oneui 6. Is safetycore installed by update or by GMS?

    • static@lemm.ee
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      I uninstalled it, and a couple of days later, it reappeared on my phone.

    • dev_null@lemmy.ml
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 days ago

      Do we have any proof of it doing anything bad?

      Taking Google’s description of what it is it seems like a good thing. Of course we should absolutely assume Google is lying and it actually does something nefarious, but we should get some proof before picking up the pitchforks.

      • Fair Fairy@thelemmy.club
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        10 days ago

        Google is always 100% lying.
        There are too many instances to list and I’m not spending 5 hours collecting examples for you.
        They removed don’t be evil long time ago

        • Kangy@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          0
          ·
          10 days ago

          Maybe you should given your closing sentence is incorrect and just bolsters the fact we shouldn’t blindly take everything we see at face value

        • dev_null@lemmy.ml
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          10 days ago

          They removed don’t be evil long time ago

          See, this is why I like proof. If you go to Google’s Code of Conduct today, or any other archived version, you can see yourself that it was never removed. Yet everyone believed the clickbait articles claiming so. What happened is they moved it from the header to the footer, clickbait media reported that as “removed” and everyone ran with it, even though anyone can easily see it’s not true, and it takes 30 seconds to verify, not even 5 hours.

          Years later you are still repeating something that was made up just because you heard it a lot.

          Of course Google is absolutely evil and the phrase was always meaningless whether it’s there or not, but we can’t just make up facts just because it fits our world view. And we have to be aware of confirmation bias. Yeah Google removing “don’t be evil” sounds about right for them, right? It makes perfect sense. But it just plain didn’t happen.

  • MangoCats@feddit.it
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Google photos has been “searchable by name” for years now. Tell it the name of a face in one photo and it can go search (pretty successfully) through all your photos for other photos containing that person. And, of course, once told, it never forgets.

    Is it still a service when you are the product? Or, are you being served? https://en.wikipedia.org/wiki/To_Serve_Man_(The_Twilight_Zone)

  • serenissi@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    10 days ago

    an app on all Android

    not my android :)

    BTW did anyone reverse engineer it? Or doing rn (I’m HTH)?