• @henfredemars@infosec.pub
    link
    fedilink
    English
    36
    edit-2
    9 days ago

    FUD. Apps cannot listen to the microphone without going through the OS first. I call FUD or share with me this magical OS-bypassing code. Compromising the OS at such a fundamental level on a recent Android version is almost certainly beyond their capabilities. I am more likely to believe the content that inspired this article is more aimed at investors and is blatantly making false claims, and that such claims from the privacy policy are generic disclaimers.

    Further, have you ever tried to get an app to consistently run in the background on purpose? It’s an enormous PITA when you actually want this to happen. Android apps do not typically run in the background at all unless they have again special permissions to bypass background restrictions. The OS strongly prefers to pause and eventually kill apps to save battery rather than permit background activities to occur unless they fall into specific categories and then only at specific times to optimize the battery usage.

    If an app asks to run in the background all the time, bypass battery restrictions, and you grant it microphone access explicitly, the problem is no longer Android. The problem is the user being stupid by granting access against their own interests. And even then, it’ll still trip the microphone indicator.

    • @Sylvartas@lemmy.dbzer0.com
      link
      fedilink
      English
      11
      edit-2
      9 days ago

      No one said they were bypassing the OS. Have you seen the permissions some apps ask for ? Messenger used to straight up refuse to work if it couldn’t access your contacts and what your screen is showing at all times (allegedly to allow their shitty app widget to always display on top of whatever you’re doing). Don’t need a microphone to spy on anyone with that.

      • @Lichtblitz@discuss.tchncs.de
        link
        fedilink
        English
        28 days ago

        To be fair, the Android permission system is crap. I have an app to automate certain things. It requests only the exact permissions required for the actions I have configured. All I want to do is enable auto-rotate if a certain app is in the foreground and set portrait mode otherwise. In order to do that, the app needs full screen reader access and can theoretically see everything that’s on the screen. That said, I personally don’t believe the Messenger app was well intentioned. But if it were, it may not have a choice but to request these permissisions for legitimate use cases.

      • @henfredemars@infosec.pub
        link
        fedilink
        English
        18 days ago

        True, and the applications are targeting children. Perhaps they’re praying on a user who will grant permissions without asking questions, of which there are many.

    • troed
      link
      fedilink
      89 days ago

      100% correct. There’s a whole field of mobile cybersecurity researchers who would be able to name names and show code if this was true.

      The rest of the comment field here saddens me immensely.

    • @ddash@lemmy.dbzer0.com
      link
      fedilink
      English
      49 days ago

      Agreed on all of that. But, see it from a different perspective, maybe the news need to misinform this way to get people to finally be privacy conscious on their phones. I mean, probably not and it is certainly a terrible way to do so, but maybe it might help that a broader population reevaluates how much they want to share online.

  • NickwithaC
    link
    fedilink
    English
    169 days ago

    While Alphonso hasn’t revealed the names of these apps, Pool 3D, Beer Pong: Trickshot, Real Bowling Strike 10 Pin and Honey Quest all feature the technology.

    Oh look, they’re all shitty games that hook people like gambling sites. Whoever would have thought!

    • Geetnerd
      link
      fedilink
      English
      109 days ago

      Fuck that. Facebook, Amazon, Google, Instagram, TikTok, etc., are all spying on everyone.

      • @pinball_wizard@lemmy.zip
        link
        fedilink
        English
        79 days ago

        But those apps don’t use the microphone, or have a plausible excuse to use the microphone, so it’s okay!

        (This is sarcasm. It’s not okay.)

  • Raltoid
    link
    fedilink
    English
    9
    edit-2
    9 days ago

    PLEASE SKIM THE ARTICLE BEFORE COMMENTING

    Here’s the part that most people seemed to miss:

    With your permission provided at the time of downloading the app, the ACR software receives short duration audio samples from the microphone on your device.

  • Geetnerd
    link
    fedilink
    English
    7
    edit-2
    9 days ago

    Who didn’t know this?

    “Yeah, me and my wife were talking about a new driveway, the next we knew we were both getting ads for driveway paving companies. The news says it’s just a coincidence…”

    • @Ep1cFac3pa1m@lemmy.world
      link
      fedilink
      English
      109 days ago

      My wife and I were driving down the highway and I saw an old Cadillac, and I said, “hey, I like that old Cadillac.” Not even an hour later I got a facebook marketplace notification about a Cadillac for sale near me. I have NEVER searched for Cadillacs for sale.

      • @Tikiporch@lemmy.world
        link
        fedilink
        English
        79 days ago

        Yeah, crazy thing is it’s never things I just think about but never tell anyone. Ads don’t come until I mention it out loud near my phone.

      • @NotMyOldRedditName@lemmy.world
        link
        fedilink
        English
        5
        edit-2
        9 days ago

        I’ve had things like this happen, and I always suspected it was Facebook itself doing it, but now I think it’s also likely its something else feeding info into an ad system that then shows the ad on Facebook.

        Every now and then I’ll just blurt out random things I want that I’d never want to see if I can trigger getting ads for it. Hasn’t happened in quite awhile now, probably because restrictions on doing it are getting better.

    • @pinball_wizard@lemmy.zip
      link
      fedilink
      English
      49 days ago

      All of the discourse around “we can’t prove they are listening” feels like gaslighting, to me.

      I don’t need proof. We have all have had this experience, and “it’s just tracking absolutely everything else so well that it guesses really accurately” isn’t in any way better, anyway.

      • @wobfan@lemmy.zip
        link
        fedilink
        English
        79 days ago

        It isn’t better, it’s even worse IMO. But it’s just the truth. It is verifiable enough that apps cannot just spy via your microphone in any reasonably modern OS, not even the old versions. What has never been verified though is that there are non-zero-day-exploit-ways to spy through your microphone.

  • @kalipixel@reddthat.com
    link
    fedilink
    English
    7
    edit-2
    9 days ago

    The apps need permission to the microphone for that and in background it would drain the battery and constantly show the microphone is accessed unless you are using an old android version. It is likely easy though to eavesdrop when the app is opened and using microphone is an expected functionality, and to pick up keywords and the sounds emitted from other sources to better know location and social graphs without GPS access.

  • @Rusty@lemmy.ca
    link
    fedilink
    English
    38 days ago

    Help, I installed a microphone app on my phone and it’s working as a microphone, what should I do?