Spyke
technology·Technologybyonyxjet

This was Likely Recently Auto-Installed on your Phone.

This morning I noticed that an app was silently installed on my device. Android System Safetycore.

So what is this app for? Supposedly it is designed to blur any images that are sent to or from you the user.

::: spoiler Android Authority Article Snippet Sensitive Content Warnings is another new Google Messages feature that Google is announcing today. It’s a feature that gives you more control over seeing and sending images that may contain nudity. Sensitive Content Warning blurs images that may contain nudity before viewing them, and it then prompts you with a “speed bump” that contains “help-finding resources and options, including to view the content.” When it’s enabled and you try to send or forward an image that may contain nudity, Google Messages will also show a “speed bump” that reminds you of the risks of sending nude imagery. - Android Authority :::

The feature seems to be geared towards google messages.

However why this needed to be a seperate app isn't really known. Why not just a feature within the google messages app? Google gives no explanation.

::: spoiler Another Android Authority Snippet Warnings check runs entirely on-device, it didn’t mention that it will actually be powered by an entirely separate app and not Google Messages itself. - Android Authority :::

Google claims it runs entirely on your phone. Whether that's true? ¯_(ツ)_/¯

According to my device, the app can have internet access restricted to it (via phone settings) implying that the app does have internet access. Any apps that dont have internet access wouldn't be in my settings list for restricting network access.

Here's the developer page. Not much in terms of detail going on there.

Here is the app on Play store with its further lacking detail and currently plunging reviews. Interestingly it seems the app has many good odd sounding reviews. Furthermore, all the new reviews are very negative. The app was 3.8 this morning. Plunging.

The whole concept of the feature isn't a bad one. However, I certainly dont wish for it to be automatically installed on my device as a seperate app. A feature that is supposedly for a messaging platform that I don't even have activated on my device.

I removed it myself as it can be uninstalled. It doesn't show up on play store by search, however you can look up the app link online and get a direct link to it. Which I put here.

Spyware? A helpful feature? I don't want it on my phone anyways.

(Yes this is a repost, I hope it isn't considered spam. Yes I did also delete the original one :/ . Goodnight 🥱!)

This was Likely Recently Auto-Installed on your Phone.https://www.androidauthority.com/google-messages-nudes-3499420/Open linkView original on lemmy.world

Checked my second GOS user profile with google services, just to make sure – nothing to be seen.

7

I first heard about this 2 days ago and it wasn't installed on my phone at that time. Just checked again on a whim and sure enough it was installed!

Google, nobody asked for your safety center bullshit app.

56

Oh thank you! Had it on my phone without any notifications or anything else to tell me that!

Am an EU resident, so that's very worrisome to say the least.

36

Thanks for the post. I had it on my phone as well. A couple days ago the messenger app forced me to update, I wonder if they are related.

36

Honestly, if the app was open-source so we can check it does not leak data, I would probably have no issue with it.

Making it a separate app makes sense if google wants to allow other apps to re-use the code. No reason to have the same functionality bundled into each app separately.

And the feature, as long as it is configurable, seems useful.

The auto-install is bad but understandable. As far as I am aware, there is no easy way to mark an app as a dependency of another app so it gets automatically installed only when needed. This should be fixed, but auto-install for all is not terrible temporary solution. This does not apply when the app is closed source and may steal your data.

27

If I had a nickel for every time I reported a pervy corporation to the ACCC, I’d have two nickels– which isn’t a lot, but it’s weird that it happened twice.

23
lemmy.world

so it will be able to restrict the messages you send....and cut off those it does not like?

and if in a year, no anti trump opinions are allowed.....we won't even be able to complain to our friends?

23

Second Hamstudy app. Also it isnt super trivial but I heard there was a six year old that passed so YMMV I found it a decent amount of work but nothing crazy. Join your local amateur radio club and they are usually awesome.

3
lemmy.ca

Not sure why everybody is upset that it's a separate app. Google has been doing this with Android for almost a decade now in order to bring new functionality without needing to update the entire operating system.

20

I suppose but the other side is OEMs abandoning still functional hardware

8
TomAwsmreply
lemmy.world

I was gonna say, I feel like I've been seeing a new Android system app on a monthly basis when checking what needs updating in Google Play.

10
Sippy Cupreply
lemmy.world

Laughs in G code S1 g54 x0y0 g0 g90. F50 M3; z-.5 a45 z0 a0 z-.5 a45 z0 a0 z-.5 a45 z0 a0 z-.5 a45 z0 a0

4

Basically oscillating the tool up and down while rotating the workpiece back and forth, while spinning the tool very, very slowly.

4
kubokreply
fedia.io

Well it was not on my e/OS phone either, so I was a bit smug. My wife's Android phone did have it. Did.

2
lemmy.world

In other news, Google wants to scan all your messenger images.

19
lemmy.ca

Entirely on my phone?

Why did my firewall ask if I wanted to allow it internet access?

18
zecgreply
lemmy.world

It needs fresh dick hashes for up to date dick recognition

28

It's into the 2s now. Not ok to push something like this automatically. Should be opt-in.

15

tfw I've never been warned about nudes in my text messages :(

14

I don't understand why they'd make this a separate app and not a configurable setting in Messages.

14
BritishJreply
lemmy.world

If you have play services installed. You will get it.

16
Lumiluzreply
slrpnk.net

I don't have it on a phone a with play services.

I'm also in the EU in case that matters

4
BritishJreply
lemmy.world

Well then, that's pretty impressive. I don't know the answer to that

3
Lumiluzreply
slrpnk.net

Seems other commentators outside USA are saying similar things.

If true, I wouldn't trust this app at all, because it just be breaking GDPR somehow

2

I have it and I am in the UK, we have our own GDPR after the whole Brexit thing. But someone would need to prove its breaking GDPR. To install it on the device isn't a violation of GDPR.

1
lemm.ee

Do you have Google's Messages app installed? If it actually does what they claim on the tin, maybe it was only installed on phones with the Messages app installed?

1
qqq
lemmy.world

There are definitely good, non malicious reasons to have it as a separate app and that should actually be preferred. Off the top of my head:

  • Separation of permissions - it only has the permissions it asks for instead of every permission messages has
  • It can be disabled/removed without disabling messages
  • it can be reused by other applications if that's a desirable feature

Some people might actually like this: thinking of women getting unsolicited dick picks in particular

12
Sippy Cupreply
lemmy.world

I found this in my app list, it hadn't asked for any permissions. If it's looking at every image I get, it's doing so extremely discreetly.

Sus. Very sus.

17

The real issue is definitely people not having total control over their own devices.

It doesn't need permissions to be sent pictures from messages though, that's all local and likely done via an exported Service. Good chance other Google products are or will make use of it in the future.

7

Keeping sealed iodine patches and band aids inside my leather wristbands.

Staying on the edge of the pit to catch anyone who falls or takes a hit.

🧷 safetycore 🧷

10

It didn't appear in my apps list and yet if I looked at the link to the play store it said it was installed... maybe double check you don't have it by looking it up on the play store as well. Fishy to say the least

8
eviltoast.org

Have to be honest first Android lost my support when they did their best to kill Micro SD cards then they decided to make connecting mtp only which absolutely ruined using a cable to transfer anything then came the head phone jack being removed.

The final nail on the coffin was scoped storage which made things so much slower it seemed absolutely ridiculous and also stopped you from being able to use files with the app you might have wanted.

At this point I'm kind of hoping something like Tizen or even Harmony Os takes over.

7
MrNobodyreply
lemmy.dbzer0.com

Why you blaming the OS for manufacturers issues. There are still phones out there with microSD and 3.5mm. Probably also some with decent transfer stuff. Funnily enough, even if another OS took over, it won't necessarily bring back all the features you want, since they are hardware based. And OS is software.

12
Teknikalreply
eviltoast.org

Because these features where all there and worked perfectly before Google decided to kill them. Are you really arguing every manufacturer in the world added scoped storage on their own.

I'll also add scoped storage is about 20 times slower and broke many legacy apps as well.

1
Darth_Mewreply
lemmy.world

Google doesn't tell the manufacturers what hardware to include/remove stop yelling at clouds

4
Teknikalreply
eviltoast.org

Google absolutely did gimp Micro SD cards even the phones that have them still you can't hot swap them because it gets merged with the primary storage instead.

Pretty obvious Google did this to sell their cloud storage when before you could switch cards at will easily.

0
lemmy.world

Infrastructure to give Google system wide control over what content you can and cannot view.

7

Right, because if that's what they wanted to do this is how they'd go about doing it rather than, let's say, using any one of the dozen or so Google-controlled device administrator apps already on your phone.

3

Wow, thanks for this. I do have it sneakily installed by Google to my phone, without my knowledge or consent. If that ain't malware behavior, idk what that is.

6
lemmy.world

Seems weird to have a separate app read sent and received messages? Is it poking holes in the Messages app sandbox?

5
lemmy.world

Lots of apps are able to interact with your text messages. Many apps are able to intercept one time passcode messages when registering accounts for instance.

It's also not weird to separate this if they intend for it to be able to be used in other areas as well.

Just because it may be used only by Messages right now, doesn't mean that it's intended to only be used there.

6

As far as I know, the apps are not intercepting the text messages for passcodes. The messages have a specific format and a hash to indicate which app they are targeting. It is up to the messages app to read the message and to forward the code. This design should not need to give the apps any access to your messages.

2

As long as it just concern Google Messages I'm fine since I don't ever use that

5

Is there not some flaw in this logic in that you are asked to decide if you wish to see a photograph before you have viewed it. Maybe we need an additional app on top of the Safety Core, called something like Android SneakPeek that lets you have a quick flash.

5
lemmy.world

Do not want! But I don't see it on my phone, at least so far. Fairly stock Moto G series with Android 14.

5
lemmy.world

Same phone, same OS. Try going to the last link from the post. That'll take you to the Store page. If it says "uninstall" then you didn't look hard enough. (Neither did I, tbh. I forgot to hit "show system apps")

3

Yup, found on my phone yesterday.

It also claimed that i was part of the beta program, which is probably how they back-doored it in, so make sure you leave the beta program to keep it from coming back.

4
lemmy.world

Wait how do I restrict apps' access to the inthernet what phone lets me do that

3

If you root it, sure. Unfortunately lots of misguided fools on the internet, including Lineage's authors will try to convince you it's not a good idea.

3

On my phone it was not installed (Android version 14). I even don't find it in google play store. Is this because of the Android version or are there maybe regional differences?

3

I wonder if it's a 15 thing. I updated to 15 last week, and sure enough, it was in my system apps. Easy enough to install, but what the fuck. I really need to get myself a pixel and install GOS.

3

Doesn't show on my phone or app store, I'm on Android 15 in the US.

1

It says no permissions required and has used no data on mine.

I froze it anyway because I didn't ask for it, but I don't think it's malicious.

1

I never got it on mine but maybe thats because I have a fucken Samsung and I've already adb'd away all the shit I dont want

1
feddit.it

I have a Pixel 7a on Google Fi service running Android 15 in the US.

I don't see that app on my list of all apps nor when i search for it in the Play Store.

1

I got it on a Pixel 7, but I uninstalled it because I'm not trying to have Google spy on me for yet another reason.

2
lemmy.ml

Your dumb phone is much insecure than a smartphone which has GrapheneOS or LineageOS. Your dumb phone certainly lacks secure 4G or 5G communication, cannot use e2e encrypted messaging platforms and cannot update firmware in case of security bugs.

1

Why would I need any of that, its only used for calls or SMS when I am out of the house. Anything important I can do on Linux.

1

No, its not running Android at all, Android uses way too much power and drains the battery much faster. Its actually terrible for a phone if all you want is to make phone calls with it.

1