Apple calls Android a 'massive tracking device' (9to5google.com)
from Jezebelley@lemmy.zip to technology@lemmy.world on 02 Nov 2023 16:04
https://lemmy.zip/post/4999342

#technology

threaded - newest

sbv@sh.itjust.works on 02 Nov 2023 16:08 next collapse

tbf Androids are about the same size as iPhones

Live_Let_Live@lemmy.world on 02 Nov 2023 17:29 next collapse

<img alt="" src="https://lemmy.world/pictrs/image/52d29ba5-54a3-4460-8594-5df37a944873.webm">

elouboub@kbin.social on 02 Nov 2023 18:18 collapse

Googled Androids yes, not degoogled ones. There's a big difference.

avidamoeba@lemmy.ca on 02 Nov 2023 16:10 next collapse

Pot, meet kettle.

To add to this, at least Android being open source allows for alternative versions that can be used on some hardware that truly don’t track and can be consistently supported long term. With Apple’s devices, that’s not a practical option.

Edit:

From the news today:

Google’s relationship with Apple is particularly significant given its unilateral access to iPhone customers. Internal Google notes of a meeting between Sundar Pichai and Apple CEO Tim Cook released Monday by the DOJ give an interesting insight into that relationship. The meeting, which began as a discussion of the regulatory environment in D.C. eventually turned toward the question of Google’s place as the default search engine on Apple products.

Cook, according to the notes, told Pichai he believes the two companies were “deep partners; deeply connected where our services end and yours begin.” In another note from the meeting, Pichai reportedly said, “Our vision is that we work as if we are one company.” Pichai tried to distance himself from that line during this testimony on Monday.

Oh boy, oh boy, oh boy!

cyborganism@lemmy.ca on 02 Nov 2023 16:30 next collapse

SOME hardware. I hope you’re not picky with your devices.

cm0002@lemmy.world on 02 Nov 2023 17:10 collapse

I mean, it’s a higher count than Apple with exactly…0

Does anyone else remember that old project from many moons ago that was working on getting Android working on iOS devices

avidamoeba@lemmy.ca on 02 Nov 2023 18:06 next collapse

I member!

TheRealKuni@lemmy.world on 02 Nov 2023 21:17 collapse

Yep! I remember running Android on an original iPhone (just for fun, really, and like two or three years after the iPhone had debuted).

BorgDrone@lemmy.one on 02 Nov 2023 16:40 next collapse

Android being open source

Hahahahaha. Good one.

avidamoeba@lemmy.ca on 02 Nov 2023 17:00 next collapse

Yes. LineageOS and GrapheneOS among other forks are some obvious counterexamples to the narrative that Android isn’t open source. Then there are the countless vendors that use it in China without Google software. I know it’s cool to hate on Google and I do partake but that’s simply a fact.

BorgDrone@lemmy.one on 02 Nov 2023 18:15 collapse

Those are missing major parts of a full Android system. Play Services is a huge one.

tiredcapillary@iusearchlinux.fyi on 02 Nov 2023 18:43 next collapse

No, they’re not. You can use sandboxed google services, if you want to. Or you can use FOSS apps.

avidamoeba@lemmy.ca on 02 Nov 2023 19:49 collapse

Or your own proprietary implementation if you’re making an Android device yourself and you were lazy.

helenslunch@feddit.nl on 03 Nov 2023 12:24 collapse

Keep digging, bud

BorgDrone@lemmy.one on 03 Nov 2023 12:49 collapse

Go buy any Android phone from a major brand (Google, Samsung, etc) try to rebuild the OS as it’s installed from the factory from source. You can’t.

Even theAOSP based Android distros like LineageOS ship with closed source binary blobs for crucial parts of the OS.

Calling Android OSS is a marketing gimmick to trick nerds into choosing Android.

helenslunch@feddit.nl on 03 Nov 2023 12:55 collapse

I don’t know how to rebuild shit but certainly plenty of people can and have.

There are dozens of forks of Android so I don’t know how you can NOT call it OSS.

BorgDrone@lemmy.one on 03 Nov 2023 13:00 collapse

You can build a version of Android, but not the version that is installed on the device you buy in the store.

There are dozens of forks of Android so I don’t know how you can NOT call it OSS.

Because even those forks ship closed source binary blobs. You simply cannot build an Android phone with 100% open source. The phones you can actually buy in the store? A huge part of those is closed source.

helenslunch@feddit.nl on 03 Nov 2023 14:17 collapse

No one is talking about off the shelf OS’s.

BorgDrone@lemmy.one on 03 Nov 2023 14:33 collapse

Yes we are. No one runs custom ROMs other than a very tiny number of hardcode nerds.

elouboub@kbin.social on 02 Nov 2023 17:01 collapse

Android is opensource. It has closed source components, but they aren't necessary to run Android.

avidamoeba@lemmy.ca on 02 Nov 2023 17:02 next collapse

And they’re completely replaceable as there are clean interfaces between the closed source components and the open source base.

jayrhacker@kbin.social on 02 Nov 2023 17:14 collapse

If those are you idea of clean interfaces… wow.

registrert@lemmy.sambands.net on 02 Nov 2023 17:53 collapse

Feel free to post comparison images of core apps on different mobile OS’es to strengthen your incredulity.

BorgDrone@lemmy.one on 02 Nov 2023 18:14 next collapse

Mayor parts that are very much necessary for a fully functional Android system are closed source. Play Services is a big one.

thisisawayoflife@lemmy.world on 02 Nov 2023 19:15 collapse

Yes. I would like to see a DIY selfhosted replacement for play services that is a direct swap in, in the sense that as an end user I couldn’t tell the difference (notifications primarily)

Edit: wow! Didn’t realize selfhosting replacements for Google services is so controversial!

bigmclargehuge@lemmy.world on 02 Nov 2023 22:52 collapse

Exactly. It’s like saying Linux isn’t open source because some distros come with proprietary NVidia drivers.

hiramfromthechi@lemmy.world on 03 Nov 2023 04:22 next collapse

Hello from GrapheneOS 👋

willis936@lemmy.world on 03 Nov 2023 11:10 collapse

The same GrapheneOS kicked out of AOSP Alliance for being toxic and shady?

helenslunch@feddit.nl on 03 Nov 2023 12:23 collapse

I dunno about that but the toxic guy was also kicked out of Graphene

AngryCommieKender@lemmy.world on 03 Nov 2023 15:32 collapse

No kettle here, just a couple of pots. The kettle is shiny and reflective. The pot is seeing its own reflection in the kettle. Hence there’s no kettle in this scenario.

avidamoeba@lemmy.ca on 03 Nov 2023 19:02 collapse

🤯 Thank you for your service.

Shake747@lemmy.dbzer0.com on 02 Nov 2023 16:19 next collapse

Well yeah, as much as I dislike apple, the majority of Google’s income comes from advertising - and to be the best at it, they need to have more personal data than everyone else, which = lots of tracking.

How do we open source hardware and make it competitive? If we figure that out, maybe we can break free of yet another 2 party system we’re creating lol

avidamoeba@lemmy.ca on 02 Nov 2023 16:25 next collapse

As opposed to Apple where advertising is a growing revenue stream that they’re definitely not gonna maximize because they have other revenue streams.

Agree on the hardware point. That said you can buy a Fairphone or a Pixel today and install usable Google-free software on it, today.

registrert@lemmy.sambands.net on 02 Nov 2023 17:58 next collapse

There are plenty of phones one can install notgoogled OS’es on, but it requires the buyer to look up the list of phones that are supported.

ricdeh@lemmy.world on 03 Nov 2023 08:40 collapse

Not necessarily. There’s always the option to port something like LineageOS yourself, which is in fact where most of the ROMs for a much larger selection of devices comes from than what is officially supported by LineageOS. This is of course not for the average user, but it is possible. Except for some devices like the newest Samsung flagships that are based on Snapdragon. With the Exynos variants, porting AOSP and operating systems based on it is possible.

registrert@lemmy.sambands.net on 03 Nov 2023 09:59 collapse

I don’t understand. There’s a large list of officially supported devices and users can create support for even more devices. Doesn’t that mean that there is a wide range of phones that support custom ROMs, even if not all phones are supported?

BlinkerFluid@lemmy.one on 02 Nov 2023 22:06 next collapse

I’m a little iffy on just how Google-free any Pixel after 5 is even if you run Lineage or something.

miss_brainfart@lemmy.ml on 04 Nov 2023 07:15 collapse

There’s one thing I’m still missing when looking at custom roms, and that is being able to properly hook into the camera API to use all the cameras that come with modern devices.

BlinkerFluid@lemmy.one on 02 Nov 2023 16:40 next collapse

You give them the freest phone with the most open operating system you can find and people will install the spyware themselves.

registrert@lemmy.sambands.net on 02 Nov 2023 17:56 collapse

Give a person a privacy phone and they’ll install spyware on it.

Give a person a want for privacy and they’ll get a privacy phone and never install closed source apps on it.

LemmysMum@lemmy.world on 02 Nov 2023 23:05 collapse

You can lead a troglodyte to knowledge but you can’t make them think.

dustyData@lemmy.world on 02 Nov 2023 17:01 next collapse

I hope eventually risc-v become the norm. It’s the closests to the open source hardware idea.

stoy@lemmy.zip on 02 Nov 2023 17:41 collapse

Unfortunately, no matter how open the hardware and software may be, for the vast number of people it will never be possible to verify that one specific peice of hardware is running a specific peice of software.

And even if the tools existed to enable normal persons to do this, they would need to trust that the hardware/software in the tool has not been tampered with and that the tool is running it.

registrert@lemmy.sambands.net on 02 Nov 2023 18:00 next collapse

I don’t think trusting the security software would be any harder to trust than the OS or anti-viruses, both systems designed to keep the users safe.

More of an issue would be how to find out who is trustable, and that will take both time and trust from the getgo.

ricdeh@lemmy.world on 03 Nov 2023 08:45 collapse

I don’t think that that’s going to be a problem. We have a long history of dealing with such verification. What is important is that people trust science and scientific institutions, and sooner rather than later, in-depth analysis of devices conducted by experts will be able to provide security and credibility for the layman to rely on without the need to run tests themselves. This is basically how the privacy and cryptography branches of hardware and software engineering have operated for decades now.

scarabic@lemmy.world on 03 Nov 2023 05:53 collapse

Yeah I’m laughing at the top comment which equates Apple and Google on this. Please give me a break. Apple sells ads within its App Store and some people would have you believe this makes them an ad company. Meanwhile Google collects data from your browsing, email, phone, and tried damn hard to hook us on its social media products, and they run ads on all of those as well as third party sites and apps. I mean FFS come on.

skymtf@lemmy.blahaj.zone on 02 Nov 2023 16:56 next collapse

I use a pixel with graphineOS and it’s more while apps in my work profile are awful, apples in my main are all open source. I think the issue is the all mobile devices are tracking devices out of the box

netchami@sh.itjust.works on 02 Nov 2023 17:50 collapse

Graphene gang

skymtf@lemmy.blahaj.zone on 03 Nov 2023 00:50 collapse

Gang gang

Poggervania@kbin.social on 02 Nov 2023 17:13 next collapse

As opposed to the iPhone were Apple is definitely tracking what people do on their phones and their information via Apple ID?

just_another_person@lemmy.world on 02 Nov 2023 17:15 next collapse

“Ignore those AirTags”

Norgur@kbin.social on 02 Nov 2023 17:17 next collapse

Just because Apple hinders tracking by others doesn't mean they don't do it themselves. Just because they can't decrypt your phone when the FBI comes knocking doesn't mean they don't track you.

Think about it. What was Apple's privacy advertising all about? It was never "we don't track". It was about encryption and how they prevent others from tracking. Yet, my wife's Siri can always find the nearest whatever and suggest stuff based on my wife's "preferences". Curiou, ain't it?

ShakeThatYam@lemmy.world on 02 Nov 2023 17:35 next collapse

From what I’ve heard it’s been harder for law enforcement to get into Android phones now.

Also, the whole privacy features only make Apple’s data gathering more valuable because they become the only ones that can access that information. Google caught on and is doing the same thing with their privacy features. Privacy features are nice, but it’s naive to think that Apple and Google don’t have other ulterior motives with implementing them.

Norgur@kbin.social on 02 Nov 2023 17:38 next collapse

Exactly! As if Apple would hesitate even one cycle of their M3 CPUs to establish a monopoly through "data protection" (aka "only we can sell access to your data to others")

registrert@lemmy.sambands.net on 02 Nov 2023 18:06 next collapse

Apple being an american company, what’s to stop high level surveilance from demanding backdoor access and printing out a letter of non-disclosure as per current US laws?

It would be negligent of any intel agency with the possibility to not make their own Room 641A at Apple.

kirklennon@kbin.social on 02 Nov 2023 18:30 next collapse

The government can't compel them to actually lie, and under their current public disclosures, they do not do such things. At any rate, demands are not unlimited in scope; US law doesn't require them to secretly re-architect the whole service to create a backdoor from scratch. AT&T willingly built 641A.

[deleted] on 02 Nov 2023 21:59 collapse

.

ShakeThatYam@lemmy.world on 03 Nov 2023 15:52 collapse

To say they are part of it kind of implies they even had a choice. When Yahoo tried to fight being a part of the program they were going to be fined $250k a day.

helenslunch@feddit.nl on 03 Nov 2023 12:29 collapse

From what I’ve heard it’s been harder for law enforcement to get into Android phones now.

Don’t need to just call up Google and get whatever they want. In fact they get whatever they want for thousands of people at a time.

ShakeThatYam@lemmy.world on 03 Nov 2023 15:47 collapse

Only for things that are on Google’s servers. If you have something that’s on-device police will use something like Cellbrite to access it.

The vast majority of stuff Google has on their servers isn’t really all that useful to law enforcement anyway and Google requires a search warrant before handing it over. And they generally notify the user when it happens (when legally allowed to do so). Most useful would probably be location data, but law enforcement can also get similar information from cell phone companies (who are much more carefree about handing over subscriber data).

Google and Apple are both actually kind of a pain to deal with for warrant related stuff. In my line of work, I most often see subpoenas for cell phone providers and social media records as those are much easier to get.

People often act like Google is just handing out user user data to the highest bidder, but that really misunderstands their profit model. They are very protective of user data. Google does not like to give it out so that only they can be the ones to profit off of the data.

helenslunch@feddit.nl on 03 Nov 2023 17:59 collapse

Only for things that are on Google’s servers.

Everything is on Google’s servers.

People often act like Google is just handing out user user data to the highest bidder

no it’s actually much worse than that

PipedLinkBot@feddit.rocks on 03 Nov 2023 17:59 next collapse

Here is an alternative Piped link(s):

no it’s actually much worse than that

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I’m open-source; check me out at GitHub.

ShakeThatYam@lemmy.world on 03 Nov 2023 18:35 collapse

Yeah, I realize it’s worse than that… When did I say otherwise? I even started off the comment by stating that Apple and Google’s privacy features were made for anti-competitive reasons, not to benefit the consumer.

Your type of fear-mongering isn’t really helpful though. It just makes people feel powerless to large corporations and makes people try to address the wrong issues. It’s important to accurately state what they are collecting and how they are using that data. We spent a decade complaining about Google not respecting privacy and selling data and what we got was Google gaining even more power. Because, that wasn’t what Google was doing or their end goal.

helenslunch@feddit.nl on 03 Nov 2023 19:57 collapse

“People” are not powerless. You and I are powerless because “people” don’t care about the dystopian future we’re living in.

And it’s not fear-mongering, it’s the truth. Google does not require warrants.

ShakeThatYam@lemmy.world on 03 Nov 2023 20:06 collapse

What are you talking about? Google does not give law enforcement information without a warrant or valid subpoena.

support.google.com/transparencyreport/…/9713961?h…

You clearly have no idea how any of this works and are fear mongering based on sound bites you may have heard. I work in this field and I know that Google (at least in the US) won’t just hand over data without a valid warrant or subpoena. Now this can be a FISA warrant where the defendant (imo) doesn’t have proper due process rights, but it is still a court order requiring them to comply.

helenslunch@feddit.nl on 04 Nov 2023 05:51 collapse

I suppose we’ll just take Google at their word, eh? They would never lie to us? They would never give out thousands of users’ information without a warrant, right?

kirklennon@kbin.social on 02 Nov 2023 18:24 collapse

Yet, my wife's Siri can always find the nearest whatever
You can choose to let your phone use your location for requests. Her questions to Siri are not associated with her Apple ID but are instead linked to a separate anonymous Siri ID, which allows a degree of context without creating any records linked to an identifiable person.

and suggest stuff based on my wife's "preferences".
Suggestions for random stuff on your phone (Do you want directions to work? Do you want to listen to this playlist that you listen to every freaking day?) are generated locally on the phone. Apple the company never sees that sort of stuff.

Norgur@kbin.social on 02 Nov 2023 18:32 collapse

Strange that those posts with seemingly absolutely sure facts are always coming from accounts that have had at least two other discussions about how great apple is in the last 24 hours. Why do only the devoted fans know for absolutely certain that there are shadowy IDs generated and never cross-linked with any other identifier and that apple never ever ever ever ever gets metadata from the stuff that is "generated on the phone locally". Google generates tons of stuff on their tensor chips locally. Does anybody really believe them when they say that they don't know anything about the stuff the Phone generates? I don't. So why would I believe Apple?

stoy@lemmy.zip on 02 Nov 2023 17:36 next collapse

Android is made by a marketing company, iOS is made by a computer company.

registrert@lemmy.sambands.net on 02 Nov 2023 18:02 next collapse

It’s funny that of all the Apple products I’ve used, an Apple computer is not one of them…

eltimablo@kbin.social on 02 Nov 2023 18:29 next collapse

Apple might as well be a fashion company at this point.

stoy@lemmy.zip on 02 Nov 2023 21:02 collapse

I am an iPhone user, and I don’t disagree at all.

atrielienz@lemmy.world on 04 Nov 2023 02:05 next collapse

Apple has turned toward the google business model. They’re a data collection company who hoards that data to target their users with ads. Can we stop saying apple is a computer company. It and Microsoft have been taking whole chapters out of Google’s book for more than a decade now.

www.wired.com/story/apple-is-an-ad-company-now/

atrielienz@lemmy.world on 04 Nov 2023 02:06 collapse
danielfgom@lemmy.world on 02 Nov 2023 17:48 next collapse

Juan already answered this on another thread

lemdro.id/comment/3314038

avidamoeba@lemmy.ca on 02 Nov 2023 18:03 next collapse

Damn, he’s got the receipts!

spudwart@spudwart.com on 02 Nov 2023 18:49 collapse

I really wish the Linux Phone was more usable.

ShitOnABrick@lemmy.world on 03 Nov 2023 10:35 collapse

Ubuntu touch has two phone manufacturers officially actively maintaining and supporting there devices prehaps in a few months or years after some reworks to Ubuntu touch that this niche operating system may be useable for daily use

netchami@sh.itjust.works on 02 Nov 2023 17:49 next collapse

Unless you use GrapheneOS this is true. But iPhones aren’t any better. GrapheneOS is the only solution.

Gekoloniseerd@lemmy.world on 02 Nov 2023 20:21 next collapse

I’d like to do this but it looks a bit complicated. Maybe there’s a video guide I can follow so that I don’t fuck it up.

netchami@sh.itjust.works on 02 Nov 2023 21:00 collapse

It’s actually super easy. This guy makes great videos about GrapheneOS. This is a video install guide, it’s really not that hard. You really don’t have to be worried, there’s nothing that you can really fuck up. If something doesn’t work, you just try again.

ABCDE@lemmy.world on 02 Nov 2023 21:03 next collapse

Does it work with most common applications?

LUHG_HANI@lemmy.world on 02 Nov 2023 21:10 next collapse

You mean apps? Then yes. You can just install Aurora.

Cypher@lemmy.world on 02 Nov 2023 21:51 next collapse

You mean apps?

What do you think apps is a contraction of?

RyruGrr@lemmy.world on 03 Nov 2023 01:01 collapse

Apparently, apple applications apply appropriate approvals for the apprehension of appliance appendices.

Thetimefarm@lemm.ee on 02 Nov 2023 23:15 next collapse

You don’t need aurora on graphene, thats the point of sandboxing.

LUHG_HANI@lemmy.world on 04 Nov 2023 01:33 collapse

How do you get apps from a trusted store without signing in?

[deleted] on 03 Nov 2023 11:36 collapse

.

LUHG_HANI@lemmy.world on 04 Nov 2023 01:37 collapse

Maybe this topic isn’t for you. Apps and applications can mean two different things depending on the context.

ABCDE@lemmy.world on 04 Nov 2023 04:56 collapse

No they don’t. Your responses are pointless and unwelcome.

netchami@sh.itjust.works on 02 Nov 2023 21:14 collapse

Yes, the GrapheneOS team put a lot of time and effort into creating Sandboxed Google Play services. It allows you to use Google services which are required for many apps without giving up your privacy. You get to choose which permissions you grant to Google Play services, just like with any other app. Basically any app that works on Android also works on GrapheneOS, except for a few things like Google Pay or Android Auto, because Google actually prevents them from working on Graphene.

HERRAX@sopuli.xyz on 03 Nov 2023 10:18 collapse

Oh man, this looks so much easier than when I installed Lineage on the Poco F1! Might go for it now that I’ve got a pixel 7

netchami@sh.itjust.works on 03 Nov 2023 13:13 collapse

I can only recommend it. I used a Samsung phone a few years ago and putting a custom ROM on it took me a whole weekend, I had to spend many hours researching and I often encountered issues. With GrapheneOS, it was super easy. 15 minutes after taking the phone out of the box I had Graphene running on it. That was my first time installing GrapheneOS btw.

photonic_sorcerer@lemmy.dbzer0.com on 02 Nov 2023 20:24 next collapse

And if you don’t buy Google’s Pixel you’re just fucked?

SandbagTiara2816@lemmy.dbzer0.com on 02 Nov 2023 20:51 next collapse

I believe LineageOS has a wider selection of devices

netchami@sh.itjust.works on 02 Nov 2023 20:56 collapse

But far worse security, privacy and app compatibility.

Contend6248@feddit.de on 02 Nov 2023 22:01 next collapse

LMFAO, i’m interested in that explanation.

netchami@sh.itjust.works on 03 Nov 2023 14:13 collapse
UraniumBlazer@lemm.ee on 03 Nov 2023 07:47 next collapse

What a load of crap. What’s ur source for this information?

xavier666@lemm.ee on 03 Nov 2023 11:50 next collapse

From a privacy standpoint, Lineage OS uses hard-coded Google IPs for some core functionalities (DNS, NTP, Webview). MentalOutlaw did a video on this and how it can be removed by rooting your phone.

PipedLinkBot@feddit.rocks on 03 Nov 2023 11:50 next collapse

Here is an alternative Piped link(s):

video

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I’m open-source; check me out at GitHub.

netchami@sh.itjust.works on 03 Nov 2023 13:15 collapse

it can be removed by rooting your phone

Which makes it even less secure

netchami@sh.itjust.works on 03 Nov 2023 13:33 collapse

Why is my comment crap?

Which of my points are not true?

LineageOS has far worse security than both AOSP and GrapheneOS as outlined in the LineageOS section of this blog post: madaidans-insecurities.github.io/android.html#lin…

It also has worse privacy because it uses Google services for things like DNS and NTP by default, which can not be changed by the user. GrapheneOS replaces all Google services like DNS, NTP, connectivity check, and the Attestation key provisioning service through either their own service or their own proxy for the Google service. Most of these can also be entirely disabled by the user on GrapheneOS. It also offers proxies for SUPL and PSDS location services and allows the user to disable these.

App compatibility is worse, as LineageOS uses microG whereas GrapheneOS uses Sandboxed Google Play services. microG is an insecure and poorly implemented version of Google Play services that sometimes has issues with basic Google SafetyNet checks. GrapheneOS just uses the standard Google Mobile Services bundle, but it’s not installed as a system app and has the same privileges as any other app. It can be installed and uninstalled by the user and all permissions can be revoked (including network and sensor access).

ricdeh@lemmy.world on 03 Nov 2023 08:36 collapse

LineageOS without GApps is literally as secure as GrapheneOS

netchami@sh.itjust.works on 03 Nov 2023 13:26 collapse

No, it definitely isn’t. Stop spreading false information and potentially giving people a false sense of security. LineageOS isn’t even as secure as stock Android, it’s definitely not as secure as GrapheneOS as GOS has many security improvements compared to the AOSP. Some examples are the hardened C Library, hardened memory allocator, improved SELinux policies, secure app spawning, hardened browser (Vanadium) which is also used for WebView, etc. LineageOS doesn’t even allow you to relock the bootloader, meaning anyone can modify the system because Android Verified Boot only works with a locked bootloader. It doesn’t have any of the security features that GrapheneOS adds on top of AOSP, it also lacks basic security features from AOSP. It’s ok for tinkering, but I would never use Lineage on a production device. You can read the section about LineageOS of this blog post: madaidans-insecurities.github.io/android.html#lin…

Quote:

A common ROM that has many of these issues is LineageOS:

  • LineageOS uses userdebug builds by default. This adds many debugging features as additional attack surface. It also weakens various SELinux polices and exposes root access via ADB, which, as previously discussed, is not a good idea.
  • LineageOS requires an unlocked bootloader, therefore disabling verified boot, which is essential to verify the integrity of the operating system.
  • It does not implement rollback protection. This allows an attacker to downgrade the system to an older version and then exploit already patched vulnerabilities. The default updater even allows you to downgrade versions yourself.
  • Most LineageOS builds also do not include firmware updates, which prevents users from getting new patches to fix vulnerabilities. Instead, it gives a pop-up advising users to flash updates manually that most people will simply ignore.

This is a non-exhaustive list. There are more issues than just those listed above. LineageOS (and most other custom ROMs) are focused on customising the device and not privacy or security. Of course, you could build LineageOS yourself to fix many of these issues, but most users will not be capable of doing so.

thorbot@lemmy.world on 02 Nov 2023 20:53 collapse

No, Google does the same shit. You just decide which big company you give your data to. Or use a Nokia on 2G

GyozaPower@discuss.tchncs.de on 02 Nov 2023 21:00 next collapse

But on Google Pixels you can install GrapheneOS, unlike any other Android device

synapse1278@lemmy.world on 02 Nov 2023 21:01 next collapse

If you install GrapheneOS, then Google doesn’t get any data from you, but they still get the money you spent on the phone. GrapheneOS only supports Google Pixels, for multiple reasons they explain in their FAQ.

Contend6248@feddit.de on 02 Nov 2023 22:01 collapse

Jokes on you, we disable 2G for the sake of 5G frequencies.

deranger@lemmy.world on 02 Nov 2023 21:29 next collapse

iPhones aren’t any better

Anyone got a source for this claim? I see it repeated often in this thread with no supporting evidence.

I’m not disputing it, I’d just like to know more.

Google has a direct financial motivation to track you through their business model. Just based on that I’d assume Google is performing more data harvesting.

netchami@sh.itjust.works on 02 Nov 2023 21:44 next collapse
[deleted] on 02 Nov 2023 21:54 collapse

.

bigmclargehuge@lemmy.world on 02 Nov 2023 22:04 next collapse

PinePhone

Multiple OS choices, hardware kill switches for connectivity/camera/microphone, expansion pins, etc. Modest specs but for enough functionality to be a daily driver, zero ads or spyware, and infinite customizability, $400 is a steal.

recapitated@lemmy.world on 03 Nov 2023 01:09 next collapse

Mine was unusable IMO but maybe I didn’t try hard enough.

netchami@sh.itjust.works on 03 Nov 2023 14:04 collapse

Linux phones are not at a point where you can actually daily drive them. They even lack support for basic apps like Signal. The camera and battery on the PinePhone aren’t great either. These are concept phones, but nothing that anyone can actually use. Also, Linux distributions are much less secure than GrapheneOS or even AOSP. And good luck getting normies to use a Linux phone, it’s already hard with desktops, but impossible with phones.

bigmclargehuge@lemmy.world on 03 Nov 2023 15:53 collapse

Yeah I’m aware they’re still in a really early/rough state, I definitely used the term pretty loosely. From what I understand they’re capable of reliably texting, calling, light web browsing and maybe playing some audio. If you aren’t someone who frequently/extensively uses your phone, and has decent knowledge of Linux, this may be enough for you. Def not the average user though.

elouboub@kbin.social on 02 Nov 2023 23:11 next collapse

Just have to pay google 800$ to leave the google ecosystem. Seems legit.

netchami@sh.itjust.works on 03 Nov 2023 13:08 collapse

My Pixel 6a was 300 bucks

UraniumBlazer@lemm.ee on 03 Nov 2023 07:45 collapse

No? There are many other ways to ensure privacy on Android.

  1. Best option: Use a Custom ROM (which Graphene OS is an example of). However, going via this route is almost always a headache, as all devices don’t have specific, stable builds, etc. Also, going this route poses a very real risk of bricking your device.

  2. Easy and safe option (I would recommend this): Buy a device with stock android instead of the crappy MIUI and other variants. Disable all google services and apps and install all your applications from Fdroid. Install a firewall like TC from Fdroid for additional protection.

netchami@sh.itjust.works on 03 Nov 2023 13:59 collapse

all devices don’t have specific, stable builds, etc

GrapheneOS is actually very stable and has specific builds for all the devices they support. It only supports Google Pixels, because these are the reference devices that AOSP is built for. They also have great hardware security features like the Titan M series of secure elements.

Also, going this route poses a very real risk of bricking your device.

Not with GrapheneOS. Their easy-to-use web installer makes is basically impossible to break your device during the installation process. It’s really easy and maybe takes 15 minutes.

Treczoks@lemmy.world on 02 Nov 2023 18:17 next collapse

Pot. Kettle. Black.

AngryCommieKender@lemmy.world on 03 Nov 2023 15:33 collapse

No kettle here. The pot sees its reflection in the kettle, kettle being shiny, so the kettle is actually different from the pot. Just one pot calling another pot black in this instance.

Synthead@lemmy.world on 02 Nov 2023 18:39 next collapse

<img alt="" src="https://lemmy.world/pictrs/image/285e3fb2-9fff-48c1-8f64-2e770354e13f.jpeg">

Paorzz@lemmy.zip on 02 Nov 2023 19:16 next collapse

Lmao pot call the kettle

[deleted] on 02 Nov 2023 19:53 next collapse

.

thorbot@lemmy.world on 02 Nov 2023 20:52 collapse

task failed successfully

locuester@lemmy.zip on 03 Nov 2023 06:18 collapse

HTTP Response 418 I’m a teapot

June@lemm.ee on 03 Nov 2023 03:42 next collapse

P sure the only difference is that Apple hoards the data while Google gives it all away sells it.

Tywele@lemmy.dbzer0.com on 03 Nov 2023 10:53 collapse

Google also doesn’t give it away

June@lemm.ee on 03 Nov 2023 13:35 collapse

Sorry sorry, semantics. Google sells user data.

theonetruejason@lemmy.world on 03 Nov 2023 13:56 collapse

No they don’t. They sell the ability to display ads to users in a targeted fashion. The user data is how they do that and is their moat. Their entire market advantage is they don’t sell the data, instead you have to continually let them decide who sees your ads to leverage that data.

Google goes to great lengths to make sure only they have this data.

June@lemm.ee on 03 Nov 2023 14:34 collapse

EFF kind of disagrees with your sentiment, which IMO is providing Google with the benefit of the doubt:

Google monetizes what it observes about people in two major ways:

  1. It uses data to build individual profiles with demographics and interests, then lets advertisers target groups of people based on those traits.
  2. It shares data with advertisers directly and asks them to bid on individual ads.
    The second method of monetization involves most of the behaviors that regular people might think of as “selling data.” Google is involved at nearly every level of the complex, automated process of third-party ad placement known as “real-time bidding,” or RTB.

eff.org/…/google-says-it-doesnt-sell-your-data-he…

AngryCommieKender@lemmy.world on 03 Nov 2023 15:31 collapse

No kettle here. The kettle is shiny and the pot sees its own reflection in the kettle. That’s the meaning of the phrase. Just two pots, one of them pointing out the other is a pot.

bigmclargehuge@lemmy.world on 02 Nov 2023 21:55 next collapse

Apple literally scans your photo galleries for illegal photos.

Edit, looking into things, it seems like they might have backtracked on this one due to backlash when it was announced.

Contend6248@feddit.de on 02 Nov 2023 21:59 next collapse

But only local, look into the source code yourself, heh.

the_lone_wolf@lemmy.ml on 03 Nov 2023 07:40 next collapse

You forget to add /s

Contend6248@feddit.de on 03 Nov 2023 08:26 collapse

If you need an /S here, you deserve the troll.

bigmclargehuge@lemmy.world on 03 Nov 2023 13:12 collapse

Righ, just like how three letter agencies definitely don’t have zero-day exploits into your devices (until they remeber about that one they definitely did put in)

Contend6248@feddit.de on 03 Nov 2023 20:12 collapse

  1. My comment was sarcasm

  2. You really think they need that feature to get to your data

bigmclargehuge@lemmy.world on 03 Nov 2023 22:38 collapse

  1. I can totally tell tone of voice an intention through text /s

  2. One of many methods.

  3. Don’t be an asshole.

Eggyhead@artemis.camp on 03 Nov 2023 06:32 next collapse

Source?

nikolaioellegaard@lemm.ee on 03 Nov 2023 07:12 next collapse

I assume they’re referring to the now cancelled CSAM wired.com/…/apple-photo-scanning-csam-communicati…

[deleted] on 03 Nov 2023 11:32 collapse

.

bigmclargehuge@lemmy.world on 03 Nov 2023 13:09 collapse

theguardian.com/…/apple-plans-to-scan-us-iphones-…

It’s since been backtracked as cited from another article. I was unaware as I don’t use Apple products and only heard about the plans when they were originally announced. I will update my original comment to reflect the feature being backtracked

helenslunch@feddit.nl on 03 Nov 2023 12:25 next collapse

No they don’t

snrkl@lemmy.sdf.org on 03 Nov 2023 14:17 collapse

Australia’s Basic Online Safety Expectations made it required by law:

If the service uses encryption, the provider of the service will take reasonable steps to develop and implement processes to detect and address material or activity on the service that is or may be unlawful or harmful

Source: www.legislation.gov.au/Details/…/Text#_Toc9347876… section 8

Eggyhead@kbin.social on 03 Nov 2023 20:38 collapse

“Service” sounds more like something such as iCloud than my personal, on-device photo library to me.

FangedWyvern42@lemmy.world on 03 Nov 2023 09:03 next collapse

Pot calling the kettle black.

AngryCommieKender@lemmy.world on 03 Nov 2023 15:29 collapse

Pot calling another pot black. The kettle is shiny and the pot is seeing it’s own reflection, at least in the original meaning of the phrase.

pinkdrunkenelephants@lemmy.cafe on 03 Nov 2023 11:25 next collapse

Well, the pot’s not wrong, is it?

AngryCommieKender@lemmy.world on 03 Nov 2023 15:28 collapse

In this case they are both pots. The kettle is shiny and the pot sees it’s own reflection, being the original meaning of the phrase.

Asudox@lemmy.world on 03 Nov 2023 11:35 next collapse

Not wrong but ironic coming from apple. As if they don’t track and have spyware.

icedterminal@lemmy.world on 03 Nov 2023 14:05 collapse

From their own privacy policy they outline what they do:

For research and development purposes, we may use datasets such as those that contain images, voices or other data that could be associated with an identifiable person.

To provide location-based services on Apple products, Apple and our partners and licensees, such as maps data providers, may collect, use, and share precise location data, including the real-time geographic location of your Apple computer or device.

Apple’s websites, online services, interactive applications, email messages, and advertisements may use “cookies” and other technologies such as pixel tags and web beacons.

We also use personal information to help us create, develop, operate, deliver, and improve our products, services, content and advertising

At times Apple may provide third parties with certain personal information to provide or improve our products and services, including to deliver products at your request, or to help Apple market to consumers.

Apple may collect location, IP Address, network information, Bluetooth information, connected devices, accessories, personal demographics, browsing history, browser fingerprint, device fingerprint, search history, app data, usage data, performance, diagnostics, product interaction, transaction information, payment information, purchasing records, contacts, social graph, watch history, listening interests, reading list, call metadata, device information, messaging metadata, email addresses, salary, income, assets, health data, ad interaction, in-app purchases, in-app subscriptions, app downloads, music downloads, movie downloads, TV show downloads, Apple ID, IDFA, Random Unique ID, UUID, IMEI, Hardware serial number, SIM serial number, phone number, telemetry, cookies, Nearby WiFi MAC, Siri request history, Web sign-in, songs played, play and pause times, playlists, engagement and library.

Literally all of this is what Google does. The only thing Apple does differently is hinder 3rd party apps to a greater degree. But to be fair, Google has been improving the Privacy features of Android with each version.

yrmitz@lemmy.world on 03 Nov 2023 12:01 next collapse

Surely Apple won’t steal any of your data when they just say “trust me bro” 😊

AceFuzzLord@lemm.ee on 03 Nov 2023 13:35 next collapse

At least with stock AOSP I can look into what’s going on and see what creepy things are going on. I try to do something similar with apple and I can kiss the air in my lungs goodbye permanently with the way they’d probably hound me.

HappyToaster1911@lemmy.world on 03 Nov 2023 15:37 collapse

Wasn’t iOS 14 like the transparency update that shown tiktok seeing everything people are dojng on their phone?

miss_brainfart@lemmy.ml on 04 Nov 2023 07:12 collapse

They made sure users knew to only give them their data and not anyone else, yes

snrkl@lemmy.sdf.org on 03 Nov 2023 14:10 next collapse

For those interested in privacy respecting android, check out GrapheneOS on Pixel: De-googled android that is strong on security and rips google out of your device… Ive been using it for two years and won’t go back. ::: spoiler Title

:::

AphoticDev@lemmy.dbzer0.com on 03 Nov 2023 14:29 next collapse

They’re absolutely right, but the last person who should be pointing that out is Apple, of all people.

Car@lemmy.dbzer0.com on 03 Nov 2023 23:10 collapse

Kind of a “takes one to know one” situation here

jcdenton@lemy.lol on 03 Nov 2023 15:12 next collapse

That’s ironic

AngryCommieKender@lemmy.world on 03 Nov 2023 15:27 next collapse

And, what is an iPhone?

zingo@lemmy.ca on 03 Nov 2023 18:11 next collapse

IPhone scans your photos even!

They say its to protect the children.

LOL!!

WindowsEnjoyer@sh.itjust.works on 04 Nov 2023 07:28 collapse

Laughs in GrapheneOS and Immich.

HW07@lemmy.world on 03 Nov 2023 18:50 next collapse

iPhone is the same thing, but you don’t have a choice.

Mustard@lemmy.blahaj.zone on 03 Nov 2023 19:02 next collapse

A miserable little pile of secrets!

Ew0@lemmy.sdf.org on 04 Nov 2023 07:31 collapse

iPhone is Dracula?

TheLobotomist@lemmy.world on 03 Nov 2023 22:52 collapse

The same, but for rich cool people

mlg@lemmy.world on 03 Nov 2023 23:00 next collapse

I’m pretty sure both iOS and Android are probably permanently backdoor-ed by the NSA, or at least they have a nice list of 0-days to whatever they want lol.

On top of Mobile OSs being the most heavily targeted by nation states, especially back in the early days of cellphones, Android is a massive source tree of java junk garbage with way the hell too many versions. I really would not be surprised if something is discovered a decade from now.

Aside from nation state actors however, Google is probably even worse because they effectively feed on FOSS and force OEMs to do random bs like requiring a crap ton of garbage if you want access to google play, or pretending they actually care about RCS and not about pushing their equally useless gapps.

It really is its own spyware.

atrielienz@lemmy.world on 04 Nov 2023 01:54 next collapse

That’s rich.

miss_brainfart@lemmy.ml on 04 Nov 2023 07:10 collapse

In every sense of the word, huh.

WindowsEnjoyer@sh.itjust.works on 04 Nov 2023 07:31 next collapse

That’s “fuck you” money talking. Apple knows thst it’s audience is basically a cult that would never leave and eats everything the Apple says lol.

sic_1@feddit.de on 04 Nov 2023 11:37 collapse

Also, there’s GrapheneOS

nostradiel@lemmy.world on 04 Nov 2023 11:12 collapse

Yeah, sure… youtu.be/nQ9LR8homt4?si=8s5fGP_3Q8NWOKUX

PipedLinkBot@feddit.rocks on 04 Nov 2023 11:12 collapse

Here is an alternative Piped link(s):

https://piped.video/nQ9LR8homt4?si=q7Lhe9a67DO_0IXY

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I’m open-source; check me out at GitHub.