this post was submitted on 01 Apr 2025
114 points (96.0% liked)

Technology

69298 readers
3851 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] AmbiguousProps@lemmy.today 23 points 3 weeks ago* (last edited 3 weeks ago) (5 children)

So the first line says that it's for older versions of android before 2022. But the next paragraph says:

For extremely specific use cases such as file managers, browsers or antivirus apps, Google grants an exception by allowing QUERY_ALL_PACKAGES permission, which provides full visibility into installed apps.

So this may still be possible, however sandboxing, especially GrapheneOS' implementation likely mostly, if not entirely reduce this risk.

[–] kipo@lemm.ee 9 points 3 weeks ago (3 children)

Yeah, meaning all newer phones past Android 11 shouldn't have this issue, but they do because of a workaround by shady companies that Google is either not aware of or not addressing. This issue isn't limited to older phones -- quite the opposite.

[–] AmbiguousProps@lemmy.today -1 points 3 weeks ago (2 children)

Apologies, I deleted my comment instead of editing it, but I meant to add that even with the shady workaround, if you have sandboxing it likely greatly reduces this risk.

Be very wary of what apps you install, and in fact, try to only use FOSS.

[–] KairuByte@lemmy.dbzer0.com 3 points 3 weeks ago (1 children)

People need to stop touting FOSS as more secure. More auditable, sure. But there are many, many examples of FOSS applications being insecure or abusive.

The bottom line is just “be wary of what apps you install period.”

[–] AmbiguousProps@lemmy.today 1 points 3 weeks ago

Sure, but I didn't mean to say that FOSS couldn't be insecure. Software itself can obviously be insecure, like we saw with xz. At least with FOSS though, it's more difficult for it to be hidden.

load more comments (1 replies)