search

Universal-Debloater-Alliance / universal-android-debloater-next-generation

Cross-platform GUI written in Rust using ADB to debloat non-rooted Android devices. Improve your privacy, the security and battery life of your device.
GNU General Public License v3.0
2.27k stars 79 forks source link

pkg: change description of com.qualcomm.timeservice and com.google.android.configupdater #479

Closed schbrns closed 4 months ago

schbrns commented 4 months ago

List your packages

"Qualcomm Time Service\nOccasionally runs in the background.\nCould be what syncs the CPU clock with Android time?\nProbably not something you want to disable."

"Qualcomm Time Service\nUpdates time-services user time offset when user changes time of the day and Android sends a TIME_CHANGED or DATE_CHANGED intents.\ntime-services restores the time of the day after reboot using this offset.\nhttps://github.com/bcyj/android_tools_leeco_msm8996/blob/master/time-services/src/com/qualcomm/timeservice/TimeServiceBroadcastReceiver.java\n"

Acknowledgements

schbrns commented 4 months ago

@AnonymousWP Wasn't sure if I should create a new issue. Edited title in case.

Context:

This actually runs after most significant actions, namely installing/uninstalling packages. It will auto-add AND auto-remove the CA pins.

Removing this is detrimental for those that installed a bunch of apps with ConfigUpdater installed, so all the new CAs got pinned, and will never be unpinned on uninstall if this package is not present. Plus the other 12 security and QoL features.

"ConfigUpdater\nOccasionally runs in the background.\nAuto updates certificates for TLS connection, firewall configuration, e.t.c.\nMainly used for Google services? Might be fine to disable if you don't use Google services. Disabling might mess with security if you do use them though.\nhttps://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/os/ConfigUpdate.java"

"Config Update\nIntents used to provide unbundled updates of system data.\nAll require the UPDATE_CONFIG permission.\nUpdates: (1) system wide certificate pins for TLS connections, (2) system wide Intent firewall, (3) list of permium SMS short codes, (4) list of carrier provisioning URLs, (5) set of trusted logs used for Certificate Transparency support for TLS connections, (6) language detection model file, (7) smart selection model file, (8) conversation actions model file, (9) network watchlist config file, (10) intent action indicating that the updated carrier id config is available, (11) the emergency number database into the devices, (12) an integer to indicate the numeric version of the new data -- devices should only install if the update version is newer than the current one, (13) Hash of the database, which is encoded by base-16 SHA512.\nhttps://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/os/ConfigUpdate.java\n"

AnonymousWP commented 4 months ago

Thanks for this very detailed issue and documentation! I opened a PR. 🙂