Hidden Google Account + Hidden Systemadminapp in LineageOS | Privacy infiltrated?...

Search This thread

Privacydroid

Senior Member
Aug 10, 2022
206
58

Well... Google truely made it deep into the OS.


lineageos_google.png

 
  • Like
Reactions: pixelodin

Privacydroid

Senior Member
Aug 10, 2022
206
58
Impossible to remove location access for companion device manager, whatever the hell that app even is.
Sounds like a little spy companion always with me, rather not have that app.

Can the permissions be revoked via root? How?


companion location.png
 

Privacydroid

Senior Member
Aug 10, 2022
206
58
To bump the question of a hidden systemadminapp, most likely storagemanager:

storagemanager_hidden_systemadminapp.png


storagemanager.png


Developers of custom roms / gsi's might know something...?
 

Privacydroid

Senior Member
Aug 10, 2022
206
58
Oh and, this is not necessarely releated to this thread about lineageos, but im curious how many of you knew this...? "Your Phone Is Listening - Ultrasonic Cross-Device Tracking by ~ The Hated One"

This is not even new but probably got ALOT worse by now.
The EU's weak response back from 2019 says it all......
 
  • Like
Reactions: SigmundDroid

ptuner

Senior Member
Oct 3, 2020
90
2
Goodwork Privacydroid, I am here after wondering why Google Assistant is still included in the latest LOS19.1 despite people complaining about it being in previous releases. Its there without GAPPS installed.

These things remind me of the scandal when Ubuntu was caught updating with a spyware from AMAZON, and many people got upset, thats why Linux Mint made LMDE (Linux Mint Debian Edition) because people lost confidence in Ubuntu. Perhaps the Linux community is higher IQ because I dont really see much outrage in comparison with this situation which seems to be EVEN WORSE than the Ubuntu incident.
 
  • Like
Reactions: Privacydroid

Privacydroid

Senior Member
Aug 10, 2022
206
58
Goodwork Privacydroid, I am here after wondering why Google Assistant is still included in the latest LOS19.1 despite people complaining about it being in previous releases. Its there without GAPPS installed.

These things remind me of the scandal when Ubuntu was caught updating with a spyware from AMAZON, and many people got upset, thats why Linux Mint made LMDE (Linux Mint Debian Edition) because people lost confidence in Ubuntu. Perhaps the Linux community is higher IQ because I dont really see much outrage in comparison with this situation which seems to be EVEN WORSE than the Ubuntu incident.
Google Assistant. where? I haven't seen that. Hopefully 20.0 will have it removed...
Not sure how many alternatives on the same quality level of lineageos are there.
If not lineage, what else could we use?

I haven't heared about ubuntu including amazon spyware, for all i know ubuntu was the most popular (maybe still is) linux os, but these days even ubuntu includes temeltry, can't remember since when but it's been a while already when they added that, having my hopes up for linux mint, however they are sponsored by yahoo which is owned microsoft, not good...

linx mint partners and sponsors.PNG


yahoo search.PNG

yahoo.PNG
 

Privacydroid

Senior Member
Aug 10, 2022
206
58
2K Topic views and yet not a single developer / professional has commented on any of the questions.
Let's see after 10K still no reply..

Simple question, why would the lineageos devs decide to ENABLE access to useagedata BY DEFAULT for ALL APPS? Lineage is adverstised as privacyos, how does that fit together??
 
2K Topic views and yet not a single developer / professional has commented on any of the questions.
Let's see after 10K still no reply..

Simple question, why would the lineageos devs decide to ENABLE access to useagedata BY DEFAULT for ALL APPS? Lineage is adverstised as privacyos, how does that fit together??

I doubt that many, if any, of the core LineageOS developers read these forums. In any event, if you're that concerned about your privacy, why don't you just use a different OS? There are several out there (/e/OS and GrapheneOS immediately come to mind) that might fulfill your needs.
 

Privacydroid

Senior Member
Aug 10, 2022
206
58
I doubt that many, if any, of the core LineageOS developers read these forums. In any event, if you're that concerned about your privacy, why don't you just use a different OS? There are several out there (/e/OS and GrapheneOS immediately come to mind) that might fulfill your needs.

It's a simple and valid question - who and why decided to enable access to useagedata for all apps by default.
Remember: in old lineageos versions this access was disable for all apps by default.

It's a simple question.
Grapheneos is only an option for pixel owners which i am not and never will be because i will not donate my money to google.
 
Google Assistant. where? I haven't seen that. Hopefully 20.0 will have it removed...
Not sure how many alternatives on the same quality level of lineageos are there.
If not lineage, what else could we use?

I haven't heared about ubuntu including amazon spyware, for all i know ubuntu was the most popular (maybe still is) linux os, but these days even ubuntu includes temeltry, can't remember since when but it's been a while already when they added that, having my hopes up for linux mint, however they are sponsored by yahoo which is owned microsoft, not good...

View attachment 5795847

View attachment 5795849
View attachment 5795851
Linux mint is my favourite the only thing is what you mentioned above yahoo is there default search engine and without agreeing to there terms of use and privacy policy you cant use it, Google recently add the option to reject all, btw i dont install anything from linux mint app store firefox is modified default page is set to there search page, i just uninstall the firefox and install it from official website.
and about google mamanger stuff yes its there even in lineageos.
 
Last edited:

Privacydroid

Senior Member
Aug 10, 2022
206
58
I would still like to know why access to useage data is by default ENABLED for all apps, i would argue by default access to useage data should be DISABLED for all apps.
Why? Well because lineageo is adverstised as a privacy operatingsystem, so obviously access to useage data goes completely against this narrative.
Wheres the logic here?
 
I would still like to know why access to useage data is by default ENABLED for all apps, i would argue by default access to useage data should be DISABLED for all apps.
Why? Well because lineageo is adverstised as a privacy operatingsystem, so obviously access to useage data goes completely against this narrative.
Wheres the logic here?
thats the thing when we ask questions they ignore and bring in some terms and conditons lol it makes me laugh to be honest and the reason for me still asking no mater how it feels to the dev, The imprtant thing is one has to know how android works otherwise no point in intaliing custom rom trsut me and soon i am going to talk about this matter and i know it will makea lot of so called recognized dev on xda forumangry but itas the truth most of them dont know anything so how come they became recognized dev?
 

SomeRandomGuy

Senior Member
Mar 17, 2008
121
25
Chicago
LG G4
LG G6
We certainly could attribute this (wrongfully or otherwise) to anything from grand conspiracies all the way down to just being lazy. While I can't contribute to that, I can say that I am quite proud that rolling our own OS - that is, something that ** YOU ** customize - is still possible. Kernel and some device driver binaries, sure, but the basics are there.

I AM VERY THANKFUL OTHERS CAN ACTUALLY DO THIS KIND OF AUDIT!

There are probably back doors in iOS. There /are/ bugs in iOS. Some are likely really serious. Some could be creatively exploited. We'll never know outside of getting a job at the big A. However, we can find stuff like this on Android, explore, theorize, talk with our peers (even if it is useless, we have the freedom to try), and fix it to our heart's content. And publish it so others can also do so, if they choose.

So... since you caught it... post your recommendations to change it, make sure it is tagged so someone can find it easily, and if possible any mods for A12/A13 variances. I'll thank you in advance, and so will others I'm sure.

I make several other changes to the way LOS works, to suit my personal preferences. As I have time, I want to work on a few others (like the lock screen allowing pulldown menus, where you could turn on (or off) airplane mode or whatever accidentally... how the hell is this not a security problem? ).
 
We certainly could attribute this (wrongfully or otherwise) to anything from grand conspiracies all the way down to just being lazy. While I can't contribute to that, I can say that I am quite proud that rolling our own OS - that is, something that ** YOU ** customize - is still possible. Kernel and some device driver binaries, sure, but the basics are there.

I AM VERY THANKFUL OTHERS CAN ACTUALLY DO THIS KIND OF AUDIT!

There are probably back doors in iOS. There /are/ bugs in iOS. Some are likely really serious. Some could be creatively exploited. We'll never know outside of getting a job at the big A. However, we can find stuff like this on Android, explore, theorize, talk with our peers (even if it is useless, we have the freedom to try), and fix it to our heart's content. And publish it so others can also do so, if they choose.

So... since you caught it... post your recommendations to change it, make sure it is tagged so someone can find it easily, and if possible any mods for A12/A13 variances. I'll thank you in advance, and so will others I'm sure.

I make several other changes to the way LOS works, to suit my personal preferences. As I have time, I want to work on a few others (like the lock screen allowing pulldown menus, where you could turn on (or off) airplane mode or whatever accidentally... how the hell is this not a security problem? ).
I have actually fixed these things in los well I build my own custom ROM since GrapheneOS is a bit to extreme Its called Arch-AOSP based on lineage tighten the security a bit to make it more secure and allowing users to customise is however they want totally forgot repainter app feature is built in the ROM.
 

SigmundDroid

Senior Member
Sep 25, 2015
378
195
Fairphone
Samsung Galaxy S5
  • Like
Reactions: Privacydroid

Privacydroid

Senior Member
Aug 10, 2022
206
58
Just wanted to contradict and looked it up:

View attachment 5874803

Oh, well, yeah, hmm, not really, eh? :rolleyes:

Never assumed it but this is definitely false advertising :D


Lucky you, if I started that today I had to use LOS19 not before 2028 :D

LineageOS seems to be a far better choice than standard google android, never the less something isn't right.
I'll give iodeOS a try and see how that compares.

PS: I still think this site is a legend https://reports.exodus-privacy.eu.org/en/
 
  • Like
Reactions: SigmundDroid

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    Is the builtin app named "Storagemanager" a hidden system administrator in LineageOS 19.1?
    I ask this because in LineageOS 14.1 Storagemanager is a systemadministrator app.
    In LineageOS 14.1 under > settings > apps > special app access > deviceadministrators, nothing showed up by default, but then i pressed the three dots on the top right and selected "show system", then storage manager was shown as active system administrator app.
    I had the option to disable it, which i did, as i dont want ANY app to be administrator as i consider myself as the device owner being the administrator in place, no need for an app to have any such administrative permissions.
    Now in LineageOS 19.1 when you navigate to > settings > apps > special app access > deviceadministrators > the three dots on the top right corner to show system apps ARE GONE.
    This makes me think storage manager is a secret/hidden system administrator that cannot be disabled in lineageOS 19.1 because the three dots at the top right have been removed in 19.1 basically making it IMPOSSIBLE to the device owner to remove unwanted systemadministrator apps.
    If infact storagemanager is a secret systemadministrator app, why is that so, why was the option to disable this app from being a system administrator removed??

    systemadmin.png


    Another question, in LineageOS 14.1 when i tried to open the calendar app, there was a prompt/popup saying "to use the calendar app you must add atleast one google account to your phone".
    To be honest that scared me... considering that i use LineageOS purely for privacy and Google is the opposite of privacy.
    That being said please keep in mind (this is very important), in LineageOS 14.1 when i opened the calendar app i was asked to add a Google account...
    Here comes the things, in LineageOS 19.1 when i open the calendar app the prompt/popup says this: "before you can use the calendar app you must add atleast one calendar account".
    That sounds very suspicious to me, because in 14.1 it was called google account and now in 19.1 its called callendar account, obviously my question is now... is the callendar account a google account just being called out in another way...?? If yes this is obviously a major manipulation because not naming google here will trick most likely any LineageOS user to creating a callendar account without even knowing that in reality what they just did was to create a goolge account on their privacy phone...... what sort of manipulative person would make such a nightmare come true? At this point i must ask if LineageOS even is a privacy option anymore... or has it been inflitrated by google already...
    callendar.png


    Another suspicous change i detected after switching from LineageOS 14.1 to 19.1 is that under > settings > apps > special app access > useage access, zero apps are listed, but once i pressed the three dots in the top right corner, bluetooth, media storage, nfc service, package installer, permissions controller, phone services, shell, storage manager, and systemui where ALL shown as "access to useage data = allowed". This really makes me woonder what is going on with LineageOS, what reason is there to grant all these apps access to useage data by default?? In LineageOS 14.1 there was not a single app even the system ones, that had useage data access set to allowed, infact in 14.1 all apps where set to be not allowed to access useage data. What is going on here and why??
    useage access.png


    useage access in detail.png


    Another change i noticed from LineageOS 14.1 to 19.1 is that under > settings > privacy, in 14.1 i was able to edit individual app permissions and enable or disable the privacy mode, in 19.1 there seems to be a new service so called "trust" which is responsible for privacy, im fine with that, however i am missing a very important privacy setting that was present in 14.1 but is not in 19.1 and that is "start on boot". On 14.1 i was able to select any specific app and deny or allow it's access to start itself on boot. Why is this important setting not present in 19.1?
    In 19.1 under > settings > privacy > permissions manager, there is no option to deny apps to "start on boot".
    permissions manager no start on boot.png


    My guess is, either 19.1 blocks all apps from starting on boot by default, or it allows it by default for all apps and there is simply no option to stop that which would be a major privacy downgrade compared to older versions...
    3
    Hello, your screencap looks good!

    If you want to open another root shell just like the screencap except issue:

    Code:
    settings list global | grep portal

    (the vertical bar is the pipe symbol)

    you should see:

    captive_portal_detection_enabled=0

    and/or

    captive_portal_mode=0

    That is your confirmation the connectivity check is disabled.

    Under Developer Options, there should be an option to enable local terminal. Not on all roms.

    Termux:

    https://github.com/termux/termux-app


    Since you presumably don't use playstore you'll have to install manually. I think its also on fdroid, I do trust that app repository. Glad it worked!
    3
    I just tried using your solution for the onnectivitycheck.gstatic.com issue by using the provided command
    :/ # settings put global captive_portal_mode 0
    Before i that i rooted the phone with magisk, the command did not work (i attempted executing the command on cmd in windows inside the adb/fastboot folder, usb drivers are also installed.
    I was able to start the daemon by using adb devices but the command you provided didn't work.

    The phone was booted normally during the test, maybe i should instead go to downloadmode or recovery mode? The link you send for more instructions says we should use a cmd app on the phone to exectue this command (a pc is not mentioned), however i don't find any cmd app on the phone (lineageos 19.1).
    No, the command is made from a root shell on the phone directly, or through an adb shell.

    First:

    open a cmd window on your pc, cd to your adb folder. Do you have "minimal adb and fastboot" installed on your pc? Its on the forums here.

    Plug in your phone to USB, do not boot to recovery or download mode. Just the normal system.

    From the open cmd window, issue "adb devices". What appears?

    If "unauthorized", you have to enable adb debugging in developer options. You have that enabled, right? If you do you will get a prompt on the phone to allow adb debugging access when you connect over USB.

    If you get "device XXXXX", I do not recall the number of characters, then you can proceed.

    issue "adb shell"

    you should get a shell prompt (your phone cmd shell)

    Issue "su"

    If you are rooted magisk may prompt you to allow root

    issue "whoami", this has to return "root".

    Then issue the command I gave you. " settings put global captive_portal_mode 0"

    The second string "settings list global | grep portal" is only to verify the success of the first command.

    You don't need adb for this, you can also enable the "local terminal" in developer options. Or use your favorite terminal. I like Termux.

    Open the terminal from your app drawer
    issue "su"
    Again, you should get a magisk prompt requesting permissions, allow it
    issue "whoami" , verify root

    then issue the same two commands.

    What version of Android are you on?
    3
    Hmmm. I don't have answers to your specific questions. In another thread, you posted, generally, that most people don't care about your concerns. Very true. I wholeheartedly support you advocating your views; however encourage you to tread lightly if you want people to reply to you.

    The only sure answer to your situation, and for me, also, is to grab the source of the rom which suits you, one without gapps, and then hire a dev to help go through the source to answer your questions. Then edit as needed and re-compile.

    I am familiar enough with the process in general however don't have the skills to do it myself. LOS and its variants are probably a good place to start. I am using a vanilla build of RROS on A10 on a Oneplus8 pro. Since we have tools for A11 that is good but the tools generally aren't available for some time after a new Android release.

    Your question might be asked of the Lineage devs, though I am sure they are busy and they are not forcing you to use their (free) product. There are also Linux phones available, although so far the hardware I have seen is not great.

    What phone are you using? If you are serious about this, and are willing to support a dev project as above, we would have to settle on one or two similar OSes on the same Android version, and hire someone for a few days. This would be expensive. I, for one, would contribute. If we found 10 or 20 like minded people a crowdfunding page could be set up. If we did not reach the necessary amount then the money could be refunded.

    To tell the truth, G keeps putting more obstacles in the way of modders and I am getting to the point where its not worth the trouble. Hopefully the hardware for Linux phones will improve.

    Thoughts??
    3
    I doubt that many, if any, of the core LineageOS developers read these forums. In any event, if you're that concerned about your privacy, why don't you just use a different OS? There are several out there (/e/OS and GrapheneOS immediately come to mind) that might fulfill your needs.

    It's a simple and valid question - who and why decided to enable access to useagedata for all apps by default.
    Remember: in old lineageos versions this access was disable for all apps by default.

    It's a simple question.
    Grapheneos is only an option for pixel owners which i am not and never will be because i will not donate my money to google.