Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”

    • static@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      31 minutes ago

      I uninstalled it, and a couple of days later, it reappeared on my phone.

    • danciestlobster@lemm.ee
      link
      fedilink
      English
      arrow-up
      8
      ·
      3 hours ago

      I also reported it as hostile and inappropriate. I am sure Google will do fuck all with that report but I enjoy being petty sometimes

    • woobat@midwest.social
      link
      fedilink
      English
      arrow-up
      4
      ·
      4 hours ago

      thank you for posting this. it’s not yet installed on my phone for some reason, but i will be checking this page every couple days to make sure it stays that way.

  • mctoasterson@reddthat.com
    link
    fedilink
    English
    arrow-up
    21
    ·
    5 hours ago

    People don’t seem to understand the risks presented by normalizing client-side scanning on closed source devices. Think about how image recognition works. It scans image content locally and matches to keywords or tags, describing the person, objects, emotions, and other characteristics. Even the rudimentary open-source model on an immich deployment on a Raspberry Pi can process thousands of images and make all the contents searchable with alarming speed and accuracy.

    So once similar image analysis is done on a phone locally, and pre-encryption, it is trivial for Apple or Google to use that for whatever purposes their use terms allow. Forget the iCloud encryption backdoor. The big tech players can already scan content on your device pre-encryption.

    And just because someone does a traffic analysis of the process itself (safety core or mediaanalysisd or whatever) and shows it doesn’t directly phone home, doesn’t mean it is safe. The entire OS is closed source, and it needs only to backchannel small amounts of data in order to fuck you over.

    Remember the original justification for clientside scanning from Apple was “detecting CSAM”. Well they backed away from that line of thinking but they kept all the client side scanning in iOS and Mac OS. It would be trivial for them to flag many other types of content and furnish that data to governments or third parties.

    • HeyThisIsntTheYMCA@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      6 hours ago

      My older brother swipes through your phone’s photos without asking, so I put some colonoscopy pictures in there. He hasn’t tried to look at photos on my phone since.

      Oh Google what have you done to yourself.

  • PokerChips@programming.dev
    link
    fedilink
    English
    arrow-up
    3
    ·
    5 hours ago

    And interestingly enough my phone crapped out on this post. But at least I was still able to read the the post.

  • LotrOrc@lemmy.world
    link
    fedilink
    English
    arrow-up
    17
    ·
    8 hours ago

    I just un-installed it

    Anyone know what Android System Intelligence does? Should that be un-installed as well?

    • Kilgore Trout@feddit.it
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 hours ago

      You can safely uninstall System Intelligence if you don’t need it. My phone has worked fine without it in the past year.

    • starman2112@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      5
      ·
      6 hours ago

      Jesus Christ they’re like bed bugs

      Is it too much to ask that my phone only contain the shit that makes it work, and not anything else?

      • A_Random_Idiot@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        6 hours ago

        Its a classic example of using “BUT THE CHILDREN” to be invasive dickheads.

        And it immediately reminds me of the story of the guy whose kid had a rash in the diaper area during covid, and the pediatrician requested pictures to remotely diagnose and treat, which google flagged as child pornography and called the cops on him, and banned/locked him out of everything (phone number, emails, pictures, etc etc) because he had everything on google.

        and no amount of the police, or even doctor, insisting the pictures were medical necessity and not child pornography would convince google to restore his acount or even let him recover his number/email/pictures/etc.

        • starman2112@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 hours ago

          The fact that Google refused to restore his account even after the police that they called said there was no child porn pisses me off to no end. They are officially allowed to close your account for no reason other than they don’t like you.

  • potentiallynotfelix@lemmy.fish
    link
    fedilink
    English
    arrow-up
    2
    ·
    5 hours ago

    Interestingly I don’t have it on my stock samsung phone. I haven’t updated it since oneui 6. Is safetycore installed by update or by GMS?

  • Xanza@lemm.ee
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    2
    ·
    6 hours ago

    Seems to be innocuous, but there’s no harm in removing it. Next update, it’ll be returned, so the better solution long-term will be (if you’re rooted) is to use an application to freeze it, which effectively disables it and it should survive and update. If you delete the app, a new update will put it back.

      • Xanza@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 hours ago

        If you freeze via non-room methods, updating the apk will re-enable it. So it’s the same situation as just removing the apk–it’ll basically re-enable itself.

        • jayandp@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 hours ago

          I’ve never had an app frozen through ADB get auto-updated by the Play Store or Google Services and get re-enabled because of it. An app with an update available will even disappear from the Update list if disabled, and in order to update it you have to enable it first.

          • Xanza@lemm.ee
            link
            fedilink
            English
            arrow-up
            4
            ·
            3 hours ago

            Freezing an app in an non-root fashion doesn’t do anything special. It’s moved to a different location and is effectively “removed” from a runnable state. The OS shows it as disabled/removed, but the files are still there. Newer versions of android (14+) will recognize applications it thinks are necessary (like this one, from Google) are moved/disabled and will pull a new apk during the upgrade process. It effectively re-installs the app.

        • jayandp@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          4
          ·
          4 hours ago

          Using ADB:

          adb shell pm disable-user --user 0 com.google.android.safetycore 
          

          If you have Shizuku and aShell/ShizuShell installed, then just run this command in aShell:

          pm disable-user --user 0 com.google.android.safetycore 
          

          Alternatively, for a GUI method, setup Shizuku and then use an app like Hail or Ice Box

    • A_Random_Idiot@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      6 hours ago

      or just disable play store and use an alternative store like aurora.

      Then it’ll never get installed in the first place.

      • Xanza@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 hours ago

        This is incorrect. It’s installed silently via a background OTA. It’s never installed purposefully through the google play store.

        • Kilgore Trout@feddit.it
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 hours ago

          It’s not installed with OTA, but through Play Services. I use microG and never will have any issue with apps auto-installing.

  • Event_Horizon@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    8 hours ago

    It didn’t appear in my apps list so I thought it wasn’t installed. But when I searched for the app name it appears. So be aware.

  • variouslegumes@reddthat.com
    link
    fedilink
    English
    arrow-up
    25
    ·
    11 hours ago

    I switched over to GrapheneOS a couple months ago and couldn’t be happier. If you have a Pixel the switch is really easy. The biggest obstacle was exporting my contacts from my google account.

    • Kbobabob@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      8 hours ago

      GrapheneOS — an Android security developer — provides some comfort, that SafetyCore “doesn’t provide client-side scanning used to report things to Google or anyone else. It provides on-device machine learning models usable by applications to classify content as being spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users.”

    • TheTurner@lemm.ee
      link
      fedilink
      English
      arrow-up
      4
      ·
      4 hours ago

      Now that you say that, my battery was draining fast the past couple of weeks. It would last maybe a day. It lasts 2 days again now.

    • Ledericas@lemm.ee
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      5 hours ago

      same here, i was wondering why my Op12r was draining like super fast, for a phone touthing 2+days battery(and im not even playing games or videos on it), yet it was draining as fast as an old pixel phone.

    • TheWaterGod@lemmy.ca
      link
      fedilink
      English
      arrow-up
      4
      ·
      8 hours ago

      I’m curious about this. I’ve got a Pixel 6 and noticed that the battery started going to shit about a month or so ago? I couldn’t find an install date for SafetyCore, but it was listed in my apps. I’ve uninstalled it now. It’ll be interesting to see if that was causing it.

        • TheWaterGod@lemmy.ca
          link
          fedilink
          English
          arrow-up
          2
          ·
          4 hours ago

          It doesn’t show in the app drawer, but I found it via the all apps in Settings.

          Go to the Settings App > Apps > “See all XX apps”. It’s called Android System SafetyCore, so it should be close to the top of the list. Tap on it and select Uninstall.

          • werefreeatlast@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            4 hours ago

            Well it looks like I don’t have it. Which is good, unless its hidden and unremovable. My battery app reports up to like 60% of power usage but nothing else. That means that some stupid app in the background is running down my battery for no good reason.