I recently asked the /c/Android community what information Google has access to on stock Android, assuming the user is not using any Google apps, and was told Google has full “unstoppable” access to the entire device, including Signal messages, the microphone, duckduckgo search history and anything displayed on the screen at all times.

Does this mean that encrypted messaging is essentially pointless to use on Android? I’m a newb here so go easy on me.

  • Jediwan@lemy.lolOP
    link
    fedilink
    arrow-up
    4
    arrow-down
    4
    ·
    edit-2
    1 day ago

    So just to confirm the answer to my question question: Its pointless to use encrypted messaging on an Android device?

    • atrielienz@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      15 hours ago

      People in the field would love to bust Google for this so it’s a safe bet that they are actively looking for Google to log or transmit what you type in the keyboard in every app. The fact that the news hasn’t broken that Google is logging this info is important. It means in the realm of possibility it’s not impossible but it is unlikely.

      Still it’s safer to assume all of your communications on stock android are being tracked or spied on.

      The same way you assume a weapon is loaded. Better safe than sorry.

    • who@feddit.org
      link
      fedilink
      English
      arrow-up
      19
      ·
      edit-2
      1 day ago

      So just to confirm the answer to my question question: Its pointless to use encrypted messaging on an Android device?

      Of course not. End-to-end encrypted messaging protects against eavesdroppers in transit. It’s an opaque envelope.

      (Edit: Keep in mind that Google is not the only potential eavesdropper out there.)

      What it cannot do is protect a message from someone reading over your shoulder when you write a message or open an envelope. On mainstream Android, that could be Google, if they choose to abuse their system-level access. On iOS, it could be Apple. And so on.

      Those companies might be eavesdropping on sent/received messages already, either at a large scale or in a minority of cases, or regionally, or they might not be doing it at all… yet. But they have the capability. You’ll have to decide for yourself whether that risk is acceptable.

      • James R Kirk@startrek.website
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 day ago

        End-to-end encrypted messaging protects against eavesdroppers in transit.

        But if the ENDS are both compromised… I wish there were more/better custom ROMS out there. Hopefully Linux Phone gets some love.

        • who@feddit.org
          link
          fedilink
          English
          arrow-up
          5
          ·
          edit-2
          1 day ago

          But if the ENDS are both compromised…

          If either end is compromised, then there is someone reading over the proverbial shoulder, and the conversation should be considered compromised.

          Hopefully Linux Phone gets some love.

          That would be a welcome step in the right direction, as would open hardware.

          • James R Kirk@startrek.website
            link
            fedilink
            English
            arrow-up
            1
            ·
            15 hours ago

            Me personally I don’t have a Pixel but I looked into Graphene and I’m told banking apps don’t work and also tap to pay.

            Linux works on pretty much every PC ever and every app can be installed. It would be nice to have that for phones!

            • pmk@lemmy.sdf.org
              link
              fedilink
              arrow-up
              1
              ·
              3 hours ago

              My banking apps just work™ without any work or fiddling. (Sweden) You can have a separate space for apps that need google play and all that and it has no access to your private data.

    • ragas@lemmy.ml
      link
      fedilink
      arrow-up
      6
      ·
      1 day ago

      It is not pointless.

      1. You still make everyone else unable to read your messages.
      2. Even though google can in theory read everything, it depends on how shady they are and definitely is illegal in some countries for them to actually do read everything.
    • corvus@lemmy.ml
      link
      fedilink
      arrow-up
      4
      arrow-down
      3
      ·
      1 day ago

      If you use stock android and proprietary software, YES. Everything you type can be recorded before it’s encrypted.