Show more

this is so forbidden and good it must be lewd

sorry for not CWing

Show thread

wow lewd 

Show thread

wow lewd 

Show thread

Now, there's things that are left unanswered for now. Can you uninstall Play Services with an already used account? Can you run adb somehow before the phone boots up for the first time, so you can make sure you have a 100% clean Android session? Can you automate the deletion every time you add an account, particularly with guest accounts? Is there any hidden backdoor I have yet to notice?

This is still amazing though, mind you

Show thread

can't install microG, guess that if you uninstall Play Services you are opting out of all apps that require it

Show thread

WhatsApp seems to work without Play Services, I'm not willing to give them a number to try out tho. I do know things such as location should be based on it tho :thinkingcat:

Is there any specific Play-only app I should look at?

Show thread

A cute detail of the Aurora Store is that it tells you whenever apps are GSF (Play Services) dependent or not

Sadly, most Play apps aren't, and most GSF dependent apps will unavoidably crash

Show thread

Trying to give a try to uninstalling Play Services with my main account, I just realized why it's not possible: it's set as a device owner (the closest thing to root in a non-rooted Android), which cannot be undone unless from inside the app itself - something that I doubt Google wants me to do.

Show thread

So yeah, only three ways to properly uninstall Play Services:

- find an exploit in the Play Services app,
- find an explot in Android itself, OR
- wipe the device

Show thread

There's also another challenge: if you uninstall every input method provided by the system, you won't be able to type your password in an encrypted phone unless ADB is enabled.

Yeah, I don't know how to feel about this one.

Show thread

Actually, that only applies with safe mode, so I think we're safe here

Show thread

This phone is basically begging to be wiped, I'll do a few more backups and then I'll dab on em spies

Show thread

Current mood: struggling to find out how to prevent the Play Services from becoming the device owner

Show thread

Apparently you need to do NFC provisioning to set a device owner... and how do you do that?

Show thread

So, you have to put the phone in contact with an NFC device (like another phone!) in order to #provision a device owner. However, you still need to be able to somehow install the device owner APK... how can you do that if you don't even have ADB...?

Show thread

Apparently it can download the device owner/device policy controller/admin app from the Internet. I'm afraid it probably relies on Google Play for that, though.

Show thread

what the hell, apparently there's even a more unknown QR provisioning mode

Show thread

AHHHHHHHHH I JUST FOUND OUT HOW TO TELL ANDROID WHERE TO DOWNLOAD THE APK FROM

I CAN ACTUALLY MAKE A CUSTOM APP THAT REPLACES GOOGLE PLAY

Show thread

Installed a demo app. The moment of truth, let's see if I can uninstall Play Services with this one!

Show thread

Basically, I just tried to uninstall every Google package except com.google.android.packageinstaller and com.google.android.webview, I think that was it

Show thread

oh god

I just realized a mistake of mine

there's no camera app in here and I don't know why???

Show thread

I know where the APKs are but I get INSTALL_PARSE_FAILED_NO_CERTIFICATES

Show thread

Yup! That worked!

It should also work as a way to restore Play Services, funnily enough - so that's pretty flexible!

Show thread

Just decided to randomly try out Jami (ex-Ring) again since I need an SMS client for Android

oh hey it looks SLICK

Show thread

@a_breakin_glass yes, it used to be called Ring... and before that, SFLPhone

@a_breakin_glass nope, it's actually a pretty decent implementation of GTK

@espectalll real "yeah, let's not mention our system requirements on our fucking website" hours

@espectalll mainly because it doesn't work on any OS X versions less than 10.11 and I have no clue why

@a_breakin_glass oh, I should check that out on my macOS, I think it should work

@a_breakin_glass tbh that should only be required for packagers and other people who will read the compile instructions nowadays

@espectalll though that's mainly because package management on osx is a mess

@a_breakin_glass hmm, for that I guess you should try Homebrew Cask, which does have Jami

@a_breakin_glass honestly I usually find it stressing as a developer when people use old OS versions, especially when that means security holes (as it is the case here, since it barely got fixed for Shellshock) - and in a more ideal world software would be formally verified but that's not the case :blobshrug:

Sign in to participate in the conversation
chaos.social

chaos.social – a Fediverse instance for & by the Chaos community