We thought Google hit rock bottom with #privacy.

Its new beta feature on Google Files for #Android called “Smart Search" is the trap door.

This creepy new feature on by default & scans every file on your phone. Why is this bad? Because it could potentially ruin your life. (1/3)

As Smart Search scours your phone, if it finds something it thinks (keyword: *think*) is CSAM, it can potentially shut down your Google account forever and flag you as a criminal. If you're deeply ingrained in Google’s ecosystem, losing your account would be devastating. (2/3)
@protonmail
Where is the documentation where it says it includes the CSAM feature ? Do you have any source for this ?
How Image Hashing Technology Helps NCMEC - Google Safety Center

National Center for Missing & Exploited Children’s Michelle DeLaune on how Google’s image hashing technology helps improve the review process of CSAM.

@protonmail
I know this platform, and the fact that Google has reported to the police different cases, but I do no see the precise point where it's linked to this feature of Google Files app.

From what I know, Google scans its services (mail, drive, etc.) but I had no clue that it includes CSAM via this feature of the app.

@sebsauvage
Yep, it would seem a *big* reach if they'd start to employ client-side scanning (Apple considered it, and were promptly shot down by privacy organizations). If they did, why would they do it in an optional file manager app, instead of a system framework?

The other option would be that Files uploaded local documents to the cloud for indexing. That doesn't seem super likely, either.

I, too, would like to see some evidence.
@protonmail

@osma @sebsauvage Indeed, what you're inferring @protonmail seems quite an accusation.

1) The existence of that API does not mean that it has been integrated with this app. The feature *could* legitimately index file content so that users would be able to search on contents.
2) If client-side scanning were to be added based on legal requirements, this probably wouldn't be a toggle-able feature. It would probably also be baked into the OS.

FUD without evidence reflects poorly on your brand IMO.

@jpostma @osma @sebsauvage @protonmail Clickbait for the Google outrage porn that Fedi loves.
@elkarrde Ne mogu komentirati proizvod jer ga ne poznajem niti sam ovlasten komentirati u javnosti, no ovaj thread komentara postavlja dobra pitanja koja su i meni odmah prosla kroz glavu kad sam vidio clickbaity naslov prvog posta 🙂
@merlinrebrovic Ideja mog boosta je bila više generalno upozorenje nego išta konkretno, taj app nit ne postoji na mom mobu (ni Files ni Proton), ali da, pitanja su potpuno na mjestu!
Ide deboost jer nije baš sve tak čisto kak je implicirano.
@osma @sebsauvage @protonmail Did anyone get an answer? Did the OP just fabricate this whole cloth? (Don't be fooled by my bio I know nothing.)

@ech
@eyalherlin found this:
https://mastodon.social/@eyalherlin/111263560408332798

"To power this experience, Smart Search scans the files in the background with device performance and privacy in mind. Scanning happens on your device so your information doesn’t leave your device. You can turn off Smart Search anytime in the app’s Settings."
https://support.google.com/files/answer/9765316?hl=en

Zero evidence has been presented that Google would be performing a CSAM scan during this process.

@sebsauvage @protonmail

@osma @sebsauvage @protonmail Wait what did you just imply ProtonMail would be a snake oil company?

Narrator's voice: ProtonMail was, in fact, a snake oil company.
@osma @sebsauvage @protonmail It's not optional, vendors are required to include Files and other Google services. They don't include the surveillance features in the Android Open Source Project partly to maintain a good image and for people to not know exactly how much they track, and partly because it's impossible for vendors to remove the tracking from Google apps
@protonmail @sebsauvage Nothing about this claims client-side scanning reporting to the server.

@protonmail @sebsauvage

This option doesn't seem to be there on my Pixel 7a running Android 14 🫤🤷‍♂️

@simonzerafa @protonmail @sebsauvage same here with pixel 4a 5G with android 14

@h03k

if it's part of a beta or phased rollout then we might not have that feature as yet.

@simonzerafa @protonmail @sebsauvage

I can't see it either. I can't find it in Google settings or Chrome settings (not that I'm using Chrome or the Google search app).

@protonmail @sebsauvage that article doesn’t mention Smart Search even once?
@sebsauvage @protonmail i can’t find any information about this on googles page about child safty https://protectingchildren.google/#introduction
Fighting child sexual abuse online

Google is committed to fighting child sexual abuse material (CSAM) online and preventing our platforms from being used to spread this kind of content.

@protonmail hearing today people on Facebook having their accounts locked because of misunderstanding over the terms "endangered" and "python"
But when we use terms such as 'think' or 'misunderstood' we imply a thinking mind was involved in the decision, when it was not. And that's the problem.

@Lazarou
That one is kind of old hat in some of the gaming groups I'm in on Facebook. Turns out when you're discussing military themed games where militaries like to name equipment after animals it can get confusing for Facebook's rather simplistic filters and it thinks you're trying to broker the sale of actual exotic animals instead of plastic tank miniatures.

@protonmail

@protonmail This is also no hypothetical.

Several cases have been recorded where #Google and #Microsoft automatically banned people and even called #Cops on them with the refusal of said #GAFAMs to admit they're wrong.

One case was peticularly astonishing of a parent sending photos of their child having skin irritation in the genital area and asking if they should get to the hospital now or book an appointment the next day.

One might assume that Google would've gotten the context right...

Here is one man’s nightmare: https://nytimes.com/2022/08/21/technology/google-surveillance-toddler-photo.html – don’t let that be you. Turn this feature off if you opted into the beta for Google Files today.

Thanks to BasicCatBR on Twitter for alerting us to this new feature so we could let our community know. (3/3)

Here's how to turn it off:

A Dad Took Photos of His Naked Toddler for the Doctor. Google Flagged Him as a Criminal.

Google has an automated tool to detect abusive images of children. But the system can get it wrong, and the consequences are serious.

The New York Times

@protonmail

Didn't even know the app was on my phone in the first place. Came out of nowhere. Never opened it myself before.

@ewen @protonmail They're talking about the default file manager, right? Or is there an android file manager and also a separate google files app?

@arh

I found a new app in the list, called "Files".

@ewen Yeah.. Google moment.
At some point I switched the region on my phone and suddenly had two apps installed, apps which I've never had before (but they were listed as "suggestions" when I got the phone I believe, theoretically not installed).
I believe that comes from the phone manufacturer rather than from google, but it's the same thing.
@protonmail Tried installing Google Files on my LineageOS (w/o GMS or MicroG) device, this option doesn't exist. 🤔


Disclamer: No data, devices or felines are harmed during this experiment, network access was terminated gracefully.
@protonmail would you recommend a different app to check the files?

@protonmail this happened to a Swedish man too. He took pictures of him and his boyfriend in the act, and mailed them over Yahoo mail. It got screened by an American organisation and flagged, and shortly after he got assaulted by police, in his home, in bed, at like 4AM.

He was beaten and taken away, and only MUCH later when shown the pictures could he explain that they’d fucked up and mistaken his THIRTY year old BF for a minor.

@grovecastle
I tried to search that story of sexual pictures of 30 year old boyfriend mistaken by Yahoo for a less than 18 year old child, pictures leading to being assaulted by Sweedish police, without success. Do you have a bookmark?
@protonmail
@protonmail The story is paywalled, got another link or story text?
How Image Hashing Technology Helps NCMEC - Google Safety Center

National Center for Missing & Exploited Children’s Michelle DeLaune on how Google’s image hashing technology helps improve the review process of CSAM.

@protonmail
I'm running Android 14 and I don't see this option. I presume it's just in the beta Files app. When it's out of beta, it might be a good idea to repost this.

Thanks for watching out for us!

@protonmail Better still, disable Files and download a file manager from F-droid like Material Files.
@bananabob @protonmail uninstall it completely with something like adb, why only disable?
@arh @protonmail Because on my phone I couldn't uninstall it.
@arh @protonmail and I didn't want to go down the ADB route
@bananabob @protonmail Is there an issue with adb? You plug in the phone, run two commands and it's done. As long as you don't get carried away, remove important things and then require a factory reset (who would ever do that? Couldn't be me), it's great to be able to just delete apps that you don't use anyway and only take up space.
@arh @protonmail I am a little cautious is all, and the phone has enough memory for now.

@bananabob @protonmail There is this guy who says that Gboard still sent data even while disabled: https://xdaforums.com/t/disabled-and-data-blocked-apps-still-sending-data-in-the-background.3713495/
And according to this answer, a disabled app can still be run in the background if executed by another app: https://android.stackexchange.com/a/64953

So I personally wouldn't trust this feature too much. But I do agree that it's probably enough in most cases.

Disabled and Data-Blocked Apps still sending data in the background

Edit: I posted this question two days ago in the general Q & A section of XDA, got no response. Since it is happening on my E4 plus, I am posting it here, hoping to get some insights. Long story short, I installed Net Monitor (from Play store)...

XDA Forums
@protonmail This is why I host my own cloud.
@protonmail I hate how file management on Android is evolving, anyways. I can't properly browse directories because the app is trying it's hardest to hide the fact that filesystems have a tree shape. I don't know why they are doing that. Does anyone know a good open source file explorer for #Android?
@fell @protonmail Look through fdroid, there are a bunch. Simple File Manager (the whole Simple suite is decently good - not the best, but good enough), Material Files I saw recommended, etc.
@fell @protonmail I've been pretty happy with x-plore for a few years now.
https://www.lonelycatgames.com/apps/xplore
X-plore – Lonely Cat Games

@protonmail waiting for Proton Phones with ProtonOS 😋

@protonmail Even for those not using Google Files, it turns out there's a sort-of-hidden "may we scour your device for search?" that can be turned off:

Settings
Google
Personalize using shared data
Turn everything off!
"Let Google apps use on-device data shared by these apps and other sources to improve your Android experience with things like better recommendations and suggestions."

@protonmail Thanks for the heads up. Keep up the good fight! (I do not have this on my Android 13 device ... Yet)

@protonmail So that's another measure to take next to https://palant.info/2023/08/29/chrome-sync-privacy-is-still-very-bad/ by @WPalant

Thanks for sharing.

Using #Amaze as file browser on Android (and not tethered to Google on this #Fairphone)

Chrome Sync privacy is still very bad

Unlike five years ago, today Chrome Sync is merely bad for your privacy. There is a way to use it without sacrificing your privacy, but Google doesn’t want you to find it.

Almost Secure

@protonmail

I don't see this on my phone:

@protonmail damn, thats scary as hell

anyway is it normal for nytimes to have subscription just for reading a post
https://z.anisp.xyz/u/EP8DIW.png