lainchan / Ω

(untitled)

Jean Dupont · 2022-10-01 07:56
Does google keyboard send everything you type to google? I heard this was the case some time ago (roughly a couple of years) but now it doesnt after complains. I even remember seeing an option to disable this in settings
Mitnick · 2022-10-22 14:34
>>64072 use something like adaway or rethinkdns to block and connections to google that the keyboard is making and thats the end of that
Yuki Nagato · 2022-10-22 14:40
>>64630 implying you dont have any other google apps/services if you still have google play services and google framework installed then you cant block the connections but so remove them with adb if you havent already
Void · 2022-10-22 18:17
>>64630 >neurosuggesting phones are not backdoored to still spy on you surreptitiously.
Trinity · 2022-10-22 23:22
>>64072 Let me disclose how things are done: They (companies) collect data pretty much like a vacuum cleaner running at 9000W. It's the new oil after all. The problem is these companies may have done it illegally (? or questionably) and would have been in much worse position now had they not made their data collection efforts slightly reduced. Mainstream apps back in around kitkat era used to even use old CVEs just to turn on the camera or voice recorder. A few era after, they limited apps' ability to access external storage for reducing the issue/abuse (thereby making it impossible to use App to SD feature unless it was implemented by manufacturer or yourself). This limitation was still ineffective later on people had to write storage isolation and still need it today. Few years later storage isolation was still a problem. A lot of official ROMs even don't have SElinux so they leak all your traffic to apps without any privilege needed! There was also a thing with apps accessing camera and sound recorder if you've given it a "yes" for just once, this changed when they implemented "ask every time". Camera apps would function and I noticed when my phone performance chugged upon opening of the app back in jellybean era (and the phone's dedicated camera led indicator lit up). This camera issue got patched only until oreo where they made it so camera apps can no longer function while minimized (which rendered Haven app ineffective after Nougat) but you've guessed it right: few months later mainstream app devs found a way to still leak/bypass this limitation (including isolated storage) and along with the help of Official Manufacturers themselves granting the ability for mainstream apps to be whitelisted of this minimized app limitation (the apps are now "fake minimized: so they can access camera/recorder like before and drain battery thereby breaking greenify/hibernation and power saving such apps due to broken idling though this isn't needed as these apps usually are installed as system app with full permissions). Don't know if they removed it entirely now but data collection is still rampant. If you're worrying about keyboard, you have more things to worry about! The clipboard leak happens since the popularization of javascript so even a linux or windows pc with browser can leak what you type or put in the clipboard! Much worse with phones. Most mainstream phone apps also abuse this - that's why they beg you to install the phone app instead of browsing the web service via browser like a well adjusted millennial, the web app also uses a soykaftier version of a web implementation (assuming your manufacturer stopped rolling out up-to-date webview) you get worse security. Even some of the mainstream apps are abysmally coded, they break tls or use soykaf versions, no cert checks, and then leak your data because some of them were plain text (and then caused leaks on the wan sniffer side). They may change their ways but it is evident they cannot be trusted with your data, they suck it like it's their lifeline, like vampire. Yup, let's call them data vampires. Who knows if you're the lucky guy to get the lucky "auto-update" that was bundled with secret sauce letting them keylog you? I mean it's not that hard, even non-official adversaries can do so with Pegasus and similar implementation. Auto-updates are the universal backdoor for tailored binaries. tldr keylogging is possible but I do know google record(ed) users through google now-assistant hotword launcher since you would get ads for certain stuff depending on what you made your phone hear. we can say it's completely legal and in the statement or the suggestions were from bots but its still creepy vampires here and there.
Crazy Jake · 2022-10-23 00:35
>>64635 thats why you use an os like grapheneos and block ips externally on the dns level if you use a stockrom >>64639 true, just use a private os and dont use any proprietary apps, especially games. better would be just not use a phone but if you will use one then consider the above