Android’s theft protection features keep your device and data safe
blog.google
external-link
Android rolls out theft protection features to safeguard your data before, during and after a theft incident.

cross-posted from: https://lemy.lol/post/25062075

Trunk Monkey Mobile would have been better. 🐒

Many of these are Google Play Services features, so it won’t be available to users open-source Android flavors that are google-free.

Lol, who wants these anyways. One more reason not to use google play services. (Though I have google play services on this phone.)

Automatic AI-powered screen lock for when your phone is snatched.

Theft Detection Lock is a powerful new feature that uses Google AI to sense if someone snatches your phone from your hand and tries to run, bike or drive away. If a common motion associated with theft is detected, your phone screen quickly locks – which helps keep thieves from easily accessing your data.

One good thing you could try is use this app:

Find My Device

Theft Detection Lock is a powerful new feature that uses Google AI to sense if someone snatches your phone from your hand and tries to run, bike or drive away. If a common motion associated with theft is detected, your phone screen quickly locks – which helps keep thieves from easily accessing your data.

Why would we need AI for that? That just makes the function unpredictable. There must be a real solution to detecting this.

The real solution is, a heuristic analysis of the phone’s gyroscope and accelerometer data.

Marketing calls that, “AI”.

TehPers
link
fedilink
English
26M

Not just marketing, that’s the term it’s always been called. Plug a bunch of parameters into a non-deterministic model and you’ve got an AI, at least by what seems to be the common definition of the term.

“AI” used to mean “whatever we don’t fully understand yet”. A lot of processes have walked the path from “fantasy” to “AI” to “algorithm”. Doesn’t need to be non-deterministic, the original tic-tac-toe playing software was “AI” at the time.

Until we get some AGI, the term “AI” will remain a moving technological target, and a static marketing target.

@ReversalHatchery@beehaw.org
link
fedilink
English
5
edit-2
6M

While I agree with you, the first step for user centric Android flavors regarding security is to support relocking the bootloader, with a custom (preferably the user’s own) digital signature. As long as we dont have that, an attacker could flash or just boot a custom bootloader through fastboot that does its own thing.

However that doesn’t really depend on Android system developers, I think, as the problem arises from the inferiority of almost every phone’s bootloader (chain) (because most phones does not support setting up a custom signature for bootloader verification), and probably that can only be reasonably solved by device manufacturers, because as I understand, bootloaders do a lot of heavily device specific things, so there cant really be a common (primary) bootloader, and making one for each phone is a lot of work that also involves lots of reverse engineering, and maybe the early bootloaders cant even be overwritten on some phones…

It’s kind of both Google’s and manufacturers responsibility. Google has made available a Dynamic System Updates feature:

https://source.android.com/docs/core/ota/dynamic-system-updates

https://developer.android.com/topic/dsu

…but it requires manufacturer support to allow adding custom keys.

Hmm, this is interesting, it looks like if it was a multiboot solution

@GingeyBook@lemm.ee
link
fedilink
13
edit-2
6M

Which is a fraction of a fraction of Android users.

I’m all for de Googling if that’s what tickles your fancy, but ask anyone on the street and they’ll have no idea what you’re talking about

Edit: This also allows Google to push some of these features to older devices which may not ever see another system update

In that blog post, google does not commit to open sourcing these play services features, to integrate in future system upgrade.

I would love to be proven wrong.

Yep, no one claimed otherwise.

@funn@lemy.lol
creator
link
fedilink
2
edit-2
6M

That’s my concern too. They should have baked those into AOSP making it available for all ROMS.

It isn’t clear which of these features use Google servers and which ones don’t. The “Find My Device” definitely does, and has no place in AOSP. If they’re actually using AI to compare phone state with some tracked “habitual” behavior, it may also have no place in AOSP, but who knows.

Create a post

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community’s icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

  • 1 user online
  • 64 users / day
  • 174 users / week
  • 621 users / month
  • 2.31K users / 6 months
  • 1 subscriber
  • 3.28K Posts
  • 67K Comments
  • Modlog