cross-posted from : https://lemmy.zip/post/70348978

all 49 comments

sorted by: hot top controversial new old
[–] 29 points 2 months ago (3 children)

Aren’t viruses and spyware illegal?

  • source
  • hideshow 3 child comments
  • [–] 10 points 2 months ago (1 child)

    Technically it's neither. Viruses spread and spyware sends your data to an attacker. This app does neither. The third party feature however does make it easier for spyware to identify sensitive content on your phone, but then you have a problem anyway because you gave a spyware app access to all your media.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 2 months ago

    If you are rich and powerful, everything you do becomes legal. Because rich and powerful people are all trustworthy and would never do something for only their own interests.

  • source
  • parent
  • [–] 51 points 2 months ago

    Sphynx cats trigger it and you get an unwarranted alert that Google is very disappointed.

  • source
  • [–] 24 points 2 months ago (1 child)

    what the fuck? I had no idea about this. I never opted into this.

  • source
  • hideshow 1 child comment
  • [–] 16 points 2 months ago*

    No shit. The billionaires at the top worry about public safety, would you believe it? (giant fucking sarcasm tag goes here for all my asperger ftiends)

    Who owns the (fully paid up) phone that's in my hands right now? I try to tell myself I do, but...

    Yea, I am not a happy camper.

  • source
  • parent
  • [–] 43 points 2 months ago (5 children)

    You can uninstall it and install this so that Google can't get it back on your system.

    https://github.com/daboynb/Safetycore-placeholder

  • source
  • hideshow 5 child comments
  • [–] 3 points 2 months ago (3 children)
  • [–] 20 points 2 months ago (3 children)

    Time to start shooting nudes on film I guess.

  • source
  • hideshow 3 child comments
  • [–] 17 points 2 months ago*

    If we weren't so fucking weak and unorganized, we'd be burning their companies and their homes to the fucking ground.

  • source
  • [–] 55 points 2 months ago (6 children)

    Reportedly, the app uses an on-device machine learning model to classify the content.

    Using your shiny new phone to train AI...

    For now its only supposed to check Google Messages, so not if you use a different text app.

    But one vulnerability already is side loaded versions with super high version numbers so they won't be auto updated. Those will scan everything and do whatever with it. Considering the apps point is to scan for nudes, likely sending all your nudes to the hacker.

  • source
  • hideshow 6 child comments
  • [–] 6 points 2 months ago (2 children)

    For now its only supposed to check Google Messages, so not if you use a different text app.

    Shameless plug for Textra as a much, much better alternative.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago (1 child)

    No RCS (not their fault, but still).

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 2 months ago

    Does Textra support RCS?

    The RCS interfaces (APIs) on Android are currently only available for Google internally to use, no other third party developer has access.

    We are hopeful Google will make these RCS interfaces available in the near future to all developers (in the spirit of Android open source), so that Textra SMS can also offer RCS functionality.

    TIL

  • source
  • parent
  • [–] 5 points 2 months ago

    Reportedly, the app uses an on-device machine learning model to classify the content.

    Using your shiny new phone to train AI...

    I would think the models are already trained, and then deployed to phones to do on-device inference. The models should be fixed and static by the time they end up on a phone (in large part because phone hardware is just not technically suitable for training, whether pre training or post training).

  • source
  • parent
  • [–] 10 points 2 months ago (9 children)

    I once stumbled upon this app automatically installed on the phone I happen to have paid for (because at this point I doubt I could call this piece of metallic tile "my phone" and suing Google Inc. for them to refund me this phone would be as successful as if I tried to push and move a certain Mountain View building from its place with my own muscles). Shortly after that, it seems to have vanished from the list of apps as mysteriously as it initially appeared, either it uninstalled itself or it was changed names. In any case, as soon as I realized that presence and realized I wouldn't have an "uninstall" option without turning on options that would straightforwardly break banking apps and government apps (gov.br the Brazilian app for everything citizen-related) I was compelled to use, I started filling the phone's gallery with all sorts of potentially-triggering stuff I either find online or (mainly) make myself: dark art including FNAF-like jump scares, haunted/cursed artifacts and occult/ritualistic imagery, photos and videos depicting snakes and scorpions, lots of Memento Mori including photos of cemeteries and tombstones, archaeological skeletons, buzzards eating animal carcasses in the wilderness, as well as media of my own cut wr... I mean, uhm, media of my own cute wrathful owl I sculpted on Blender. Yeah, several different 3d rendered scenes and short animation videos as well, especially scenes in which she's performing chases and huntings... Not to mention the plethora of owl photos and videos, many of which are birdwatching of them catching and eating prey on nature, in potentially gory settings (i.e. the unfiltered, untamed nature who doesn't care about our anthropocentric definitions of good and evil).So if Google decides to start "protecting me from (my own) sensitive imagery", their clanker is essentially going to have a hard time having to go through gibibytes of media and potentially wiping the whole device as I made sure to fill the entire storage (even non-media things too, such as using provoking nicknames for fictional contacts like a contact card for "Inanna", as well as odd descriptions for bank transactions such as "my soul belongs to Ereshkigal") with purposefully sensitive content. If they do that, I'll then have something more concrete to sue them for: religious intolerance, as it's all representing of my left-hand path spirituality.And with all this I leave this one absurdist idea on how to try and boycott the corporate nanny (and surveillance). A phone gallery full of sensitive items (not nudes, but dark/provocative art purposefully built to trigger similar nannying responses) will hopefully overwhelm their servers, shall they offload the computing to their data centers. If this doesn't overwhelm their servers, at least the techbros and their clankers are going to have an interesting time when scrolling through legal-yet-disturbing content they hoarded from Android users' phones.!technology@lemmy.world

  • source
  • hideshow 9 child comments
  • [–] 8 points 2 months ago (3 children)

    It’s not looking for stuff like you’re describing, skeletons, graves, birds, whatever spoopy “dark” stuff you put on there. It’s looking for nude people, then actioning/alerting if it thinks minors are in the images. You definitely don’t want to honeypot this ai bro.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 months ago (2 children)

    That's the thing: they're looking for something, and in order to look for something, they must , and lots of computation (AI inference) must happen, especially when it involves nonindexed files (my own private art, from digital drawings and handmade sketches, going through photos of my own ritualistic installations, all the way to Blender 3D renders and animations, all of which is yet to be crawled). And if this involves gibibytes of data, on a smartphone whose hardware can barely run 1B parameter clankers locally without hiccuping, I can see my private files going to Google's servers for "efficient inference", files of which will likely end up seen by (and sowing some interesting inspirations for nightmares in the subconsciousnesses of) Google's employees during server maintenance/audits or, mainly, end up training their clanker.As for the latter, hopefully Google Gemini would end up "seeing" enough of my digitized psyche to randomly start silly infodumpings about, for example, different owl taxonomies and their diets down to the very gory microdetails about how owls make a tasty dinner out of mice, and/or the different interpretations by historians and archaeologists regarding the figure (Ereshkigal or Lilith) depicted in the Burney Relief, a Mesopotamic plaque of which, by the way, is part of the phone's gallery too (including my own artistic works inspired on it) and seemingly an efficient trigger for nudity detection algorithms, which will likely put the rest of the gallery under automated scrutiny (because there was a positive, albeit a false one) and, thus, serving as the semantic Trojan Horse for my dark artistic private content to make its way to their servers.I mean, how else Google Gemini would've taken the "inspiration" to suddenly start telling people to "eat rocks" and "add glue to pizza"? Its training data is crowdsourced so there's nothing much Google can do to avoid sources poisoning the well (and I must nod at the Nephentes algorithm which I praise as way more efficient than Anubis to hurt the western AI corps) other than:1. Adding said poisoned sources to their .gitignore equivalent if they know they'll likely find poison they don't want messing up with their expensive AI training.2. Doing manual curation of people's personal files, which is time-consuming and potentially unfeasible when dealing with billions of phones.3. Trying to improve the detection algorithms to avoid poisoned sources (which requires training data, which requires them to rely on potentially poisoned sources, which defeats the whole purpose of improving the algorithms in the first place).4. Stopping to put everything else into scrutiny when the detection algorithms stumble upon (potentially false) positives, risking false negatives, which will likely attract some heat from regulatory agencies worldwide and fines for failing to comply with things such as age checking laws (and there it goes the GOOG stocks, together with the entirety of NASDAQ, like a Titanic as investors realize they're paying for fines not theirs; be it GOOG or other stock, the popping of the ongoing AI bubble will inevitably be something in this regard, Western corporations having their clankers failing on them).At best, this will consume some portion of Google's resources (including but not limited to human resources), albeit as infinitesimal as my silly existence can get to a worldwide corporation, but it's still something I guess...!technology@lemmy.world

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 2 months ago (1 child)

    Image classification is old tech that existed long before ChatGPT and similar huge models became the new norm. These models are already embedded in many data flows and run within milliseconds on non-specialized hardware.

    You were talking about 1B models. More modern image classification are in the mere millions. Yolo v10 has like 7M, MobileNet, which Google often uses, has around 4M parameters depending on the version. Image classification is not why there are data centers being built everywhere.

    Camera apps, image and video filters and content moderation (the app in question) all use them for live processing. I can guarantee you this runs flawlessly on your phone unless it's older than 10 years.

    You're employing AI guerilla warfare against pre-LLM technology. It's not effective.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 months ago

    Machine translation is also pre-ChatGPT tech, yet Google have been outsourcing their Translate to their Gemini, as in, Google Translate became yet another Gemini interface, just like many Google "products" nowadays.But I'm aware of and I agree that "protoclankers" such as Image Classifier models (e.g. MobileNet) are lightweight enough to run on low-end devices like the one (Nokia 5.4) I use... although, even in this case, when protoclankers are employed in place of clankers, one of my main points stays the same: the steps being performed whenever there's a (false) positive for a pre-instructed pattern.A false positive is particularly likely for protoclankers due to their higher compression. If even full-fledged clankers such as Mistral can misread my owl drawings as "a cat" or (because we're talking about Google) Google Lens/Gemini can misread my digital art of a solar eclipse silhouetted by a Bubo virginianus as "a viral photo showing a Spanish professional skateboarder Danny León performing a mid-air trick perfectly aligned with the August 12, 2026 total solar eclipse" (when it's far from being a photo), I can only imagine how awfully a million-parameter Image Classifier protoclanker can perform with deeply-symbolic and carefully-drawn art which even humans can struggle to understand. There's no magic when it comes to how much data can fit within a mathematical representation of a dataset larger than the representation itself, especially when Zipf's law gets applied to said dataset in order to try and remove hapax legomena while also accounting for repeated data.And what happens after a false positive happens? Even if it's a locally-ran image classifier, the whole thing isn't fully local; if the locally-running protoclanker detects something matching the pre-instructed pattern, then a set of online tasks will likely be performed: uploading the file(s) to Google servers or, if the pattern being searched for is criminal imagery, preemptively filing a report to the authorities.In the latter case, if the protoclanker is filing reports without humans in the loop doing the due-diligence of double-checking (which is very likely what's happening due to how employees cost money and how Google et al have been prioritizing their budget to the ongoing AI hype), then Google, legally responsible for their protoclanker, would be committing the crime of false accusation (e.g. misreading my derivative mashup between Burney Relief and Éliphas Levi's Baphomet as "CSAM" as it incorrectly labels the flanking owls as "minors").And given how my artistic content is anything but criminal (the most shady aspects being the psychological horror and the depictions of blood in vampire contexts, aspects of which, given how there are Hollywoodian horror movies depicting the same, are perfectly legal), stemmed from a legitimate religious expression which (at least on paper) is protected by law (Article 5, item VI from Brazilian Federal Constitution as I'm someone under the umbrella of Brazilian laws) and done in a private space, the potentially unsupervised filings of false criminal accusations by Google's protoclanker, be it against me or any other law-abiding person, will hopefully result in Google shooting themselves in the foot.The guerrilla tactic here is me being bold enough not to care about the consequences of using a surveillance device (a phone running stock Android) to register, record and manifest my faith in a very verbose and unfiltered, artistic manner, fully aware that the phone will phone home (pun intended; I don't even bother to use VPNs and PiHole, I'm raw-doggin their surveillance when I'm not on my Linux laptop); and in the meantime, hoping Google will hoard fragments of my dark psyché to train their Gemini (thus poisoning the well in the process; it would be fun to see Google Search/Gemini, out of nowhere, randomly spitting invocation texts written in Akkadian/Sumerian cuneiform, infodumping owl taxonomy and their diet, spitting random ramblings against the Demiurge, quoting pessimist philosophers such as Phillipp Mainlander, and/or having Nano Banana to produce images with glitched artifacts resembling the Seal of Lilith).!technology@lemmy.world

  • source
  • parent
  • [–] 6 points 2 months ago (2 children)

    So...

    1. They really don't care about that stuff
    2. They are using your own phone's processing power to scan, not theirs. I'm sure they have a phone-home mechanism, but they have no vested interest in scanning server-side when they can do it phone-side.
  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago (1 child)

    As I said to borari, when stuff involves lots (GiBs) of nonindexed files (my private art) and a smartphone whose hardware can barely make a distilled Llama/Gemma to spit out a "The sum of the squares of the sides is the square of the hypotenuse" (yes, I did try local LLMs so I'm aware of my hardware limits), they would have no choice other than phone home, and thus carrying haunting voices through the ongoing call.Also, they have some inner desire to hoard people's data for training their clanker. Except the data can (and will) be poisoned, thus poisoning the well.!technology@lemmy.world

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 2 months ago

    I appreciate the spirit of reistance, also +1 for the left hand path, however, the broader society needs a more solid solution to these privacy-invading and covertly installing apps. I get it you're doing the best you know how. I am in the same boat. But we need something more solid for the long term.

  • source
  • parent
  • [–] 9 points 2 months ago (1 child)

    hey folks i got graphene, do i need to worry about this or is this what the sandbox is for?

  • source
  • hideshow 1 child comment
  • [–] 7 points 2 months ago (2 children)

    just hoping my current phone survives ling ebough that my next one can be a linux phone

  • source
  • hideshow 2 child comments
  • [–] 14 points 2 months ago (2 children)

    I've got a Pixel 9 I keep for development and uninstalled that system app a few months ago. It's still gone. Maybe updates are reinstalling it but saying that it cannot be uninstalled or removed is a lie.

  • source
  • hideshow 2 child comments
  • [–] 4 points 2 months ago*

    Apple already uses machine vision for photo searching, that weird auto categorization it does and such. They have for years.

    I would bet the photos app already classifies nudes, but silenty, mostly so it doesnt add your nudes to an auto album.

  • source
  • [–] 2 points 2 months ago

    I think it can be removed, at least for my phone, in the settings > Google or just use adb.

    If they really care about users' security, they should make Graphene OS's GMSCompact and explicit permissions the new standard instead of restricting what apps can they use and forcing invasive system apps. And centralized censorship and requiring an account is not what makes apps secure. Source available and reproducible build is.

  • source
  • [–] -3 points 2 months ago* (last edited 2 months ago) (3 children)

    Okay, thinking on this more, I have a very hot take here.

    What's the big deal?

    Google is seemingly offering a locally processed machine vision API to other apps, as far as I tell. This might manifest as some messaging service nagging you if you try to send nudes to someone, or filtering porn out of a feed. Or other "safety" features I suppose, like classifying slur-laden messages as abusive.

    ...But Google was most certainly doing this with Google apps already. Like the stock photo library most apps use.

    If people are already using unprivate services for this kind of thing, honestly, they were digging their own grave, and this hardly moves the needle. All it does is make the spying/censorship more apparent.

    I say those users need a cold bucket of water to the face, and this may provide it.

    ...But otherwise, it wont affect apps that dont use the API, right?

  • source
  • hideshow 3 child comments
  • [–] 7 points 2 months ago* (last edited 2 months ago)

    I don’t want the infrastructure built and forced onto users, even if it’s supposedly for benevolent reasons.

    Software forced on me should manage necessary services for the functionality that I bought the hardware for.

    Forcing this functionality through my phone means you’re dedicating some of my phones compute, memory, and storage toward something I don’t want. I’m paying for it every time I charge my phone.

    Not to mention the fact that the actor in question, Google, isn’t trusted. I don’t want to help them beta test their shit on my hardware. I don’t want to help them succeed in whatever vision they have for this things future. I don’t trust that it won’t eventually be used to infringe on me.

    If I wanted this functionality, I’m sure I could have downloaded it. That option wasn’t given, though… so I have to wonder why. Why am I being forced to have this shit?

  • source
  • parent
  • 17 comments in c/privacy@lemmy.ml view that post
    [–] 24 points 2 months ago (3 children)
  • [–] 6 points 2 months ago (2 children)

    And anyone who takes a photo of you needs to ask your consent.

    And you first need to ask them if they have degoogled or not.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 43 points 2 months ago (3 children)

    cybernews warns of google privacy issue, librewolf warns me of cybernews privacy issue.

  • source
  • hideshow 3 child comments
  • [–] 40 points 2 months ago (2 children)

    Life itsself is becoming a privacy issue

  • source
  • parent
  • hideshow 2 child comments
  • [–] 11 points 2 months ago

    Trying to avoid privacy invasions is the new 'life'.

    I'm starting to think I need to start looking into alternatives to linux, because the slop is creeping in.

    I'm flattening my lineageos with gapps phone tomorrow, to set it up as lineageos with microg.

    I started looking into non-smart phones the day before yesterday.

    ...and it all seems like I am just delaying the inevitable.

    Let alone the ai that is scanning my fucking grocery shopping, the creepoids walking around with pervert glasses, the tv's that are spying on their owners, the ovens that need a downloaded app just to change the time, the cars pushing adverts, the routers that are following me around the room...

  • source
  • parent
  • [–] 20 points 2 months ago

    Apparently it can be removed, then a placeholder "app" can be installed to prevent re-install https://github.com/daboynb/Safetycore-placeholder/releases

    I checked and don't have it on Google Pixel, which somehow makes me even more paranoid now...

  • source
  • [–] 11 points 2 months ago (6 children)

    Just get a supported Pixel phone and flash GrapheneOS on it. And while you're at it, install a Linux distribution of your choosing onto your computer(s).

  • source
  • hideshow 6 child comments
  • [–] 4 points 2 months ago* (5 children)

    What pixel phone would you recommend for someone on more of a limited budget? i recently switched to Linux on my desktop and my laptop. Its just my phone left to sort out now

  • source
  • parent
  • hideshow 5 child comments
  • [–] 5 points 2 months ago

    Used 8a's and 9a's are relatively cheap. 7 Is okay but I would try to get a newer one for a longer update cycle. I've heard 6's and older have battery issues, so maybe stay away from those ones.

  • source
  • parent
  • [–] 3 points 2 months ago (2 children)

    Also I would reccomend reading a bit of their documentation on their website. I uses Graphene and I reccomend it, but it wasn't exactly a painless transition for me. It was worth it though.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 months ago

    So it scans for images in Google Messages, as in the SMS app? That's very niche. Anyways it's not on my phone yet

  • source
  • 13 comments in c/privacy@programming.dev view that post
    [–] 18 points 2 months ago

    So Google won't make APIs that allow developers access to RCS and therefore the ability to integrate it into third party messaging clients, but this is potentially kosher? Go fuck your hat Alphabet.

  • source
  • [–] 36 points 2 months ago (7 children)

    Love the fact the article links directly to the solution. Thank you for this!

    This event prompted the development of an empty app: a placeholder with the same name and a massively inflated version number, SafetyCore v2000000000. Users sideload it, so the Google Play Store can’t overwrite the app with the real SafetyCore.

    Just make sure to read the GitHub page first as proper uninstallation of the original is essential.

  • source
  • hideshow 7 child comments
  • [–] 1 point 2 months ago (4 children)

    But the title says it can't be removed?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 2 months ago (3 children)

    The article adds more details by explaining the app keeps getting silently reinstalled

  • source
  • parent
  • hideshow 3 child comments
  • [–] -3 points 2 months ago* (2 children)

    How would it be reinstalled if you can't uninstall it in the first place?

    To me "can't remove" implies it cannot be uninstalled at all.

  • source
  • parent
  • hideshow 2 child comments
  • This sounds like Chat Control, minus sending a report to interpol

    https://fightchatcontrol.eu/

  • source
  • [–] 13 points 2 months ago (1 child)
  • [–] 2 points 2 months ago

    primarily in newsletter emails and media reports rather than direct correspondence. A 2003 email shows Ghislaine Maxwell invited Sergey Brin to a dinner at Epstein's house, and Brin offered to bring Schmidt along. Most references are incidental mentions in tech industry news. No direct correspondence with Epstein has been documented.

  • source
  • parent
  • ELI5, what are the downsides to installing the unofficial app?

  • source
  • 7 comments in c/android@lemdro.id view that post
    [–] 9 points 2 months ago (2 children)

    So we are literally China now? We can’t even watch nudes?

  • source
  • hideshow 2 child comments
  • [–] 20 points 2 months ago (1 child)

    There's a whole lot of "people are saying" and not a whole lot of substance in this article.

  • source
  • hideshow 1 child comment
  • [–] 3 points 2 months ago

    Sure they can. Install LineageOS.

    There's a big difference between "Android" and "Google Android".

  • source
  • [–] 1 point 2 months ago

    I can't find this on my OnePlus, is it hidden?

  • source