Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

IIRC if it's a system package, that will just disable it, not remove it, and it can be re-enabled fairly easily.


> can be re-enabled fairly easily

Right, but remotely?

If the package is disabled, and not re-enabled by third parties, and this operation can disable spyware... As said, I do not quite know yet how effective this can be in practice.


> Right, but remotely?

It doesn't matter; the attack described in the article already requires physical access.

Regardless, I'm sure Google has hooks that allow them to remotely enable/disable apps on the phone via Play Services, so... yes, remotely.


If it were just the Google Play Services, disabling that would disable remote enabling of applications - it would also make some applications unusable.

One solution to the remote enabling of apps could be a "watchdog" monitor that checks relevant statuses - so you will know if a past user decision got overridden.

Anyway, we need a database profiling Android software with relevance to security and privacy. There must be something around.


> we need a database profiling Android software with relevance to security and privacy.

GrapheneOS maintains a list for Pixel phones:

https://github.com/GrapheneOS/adevtool/commit/9c5ac945f

https://news.ycombinator.com/item?id=41264936


you can safely assume google has full remote access to your android devices [0] [0] https://www.bbc.com/news/technology-45546276


And when Apple did it with the iPhone "1" they said in press conference that "we decided that if we did not put the feature in, we would later regret it".

The (BBC) article confirms that some Android implementations allow remote access from Google.

The question remains, how much can `pm uninstall --user 0` limit the unwanted. For example, that remote access to the configurations the article discusses.


Can you provide a source for that quote? I can’t seem to find it.


I am not the person you are replying to but it is blantantly obvious that IF you have google play services on your phone, they have full access to your device.

They have accidentally shown their hand previously by turning on battery saver mode on everyone's phone on accident.

https://tech.hindustantimes.com/tech/news/google-can-remotel....

They can try to say it is limited to whatever, but I think all the smoke means there is fire. I used to exclusively use Android devices until this incident happened.

At the end of the day, I realize that even if I buy a google phone, I am still the product. I do not believe it is the same with Apple. Do I trust apple? No way, but I feel they have more incentive to not treat my data as a product to be sold and my device to be used to spy on me.


So what are you suggesting? Don't disable it?


I didn't say that; not sure how you got that from my comment. Sure, disable it, but don't let that make you believe it's gone and permanently inactive.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: