this post was submitted on 19 Mar 2026
231 points (97.5% liked)
Technology
82810 readers
4007 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Android runs apps sandboxed, so no app can access what you write in another like your banking app, or the unencrypted packages it sends.
Yea the argument stated works better for rooted environments than rootless environments or sideloading.
In a non-root scenario, you would need to specify a few permissions to give a keylogger that amount of access. I think that a big issue is people not understanding that there is a difference between a rooted device or root installed app, and a sideloaded application.
Just because you have a non-google device or a rooted device != you have a compromised device. Applications aren't going to magically install running as root, every rom worth their salt keeps it a clear isolation between the layers, and some roms don't even allow you to use the root environment after installing it.
In your standard google phone install? A keylogger wouldn't be able to be installed without enabling an accessibility permission. It's not like you can just "oops I just sideloaded a keylogger haha silly me" like described. Both google installed and side loaded applications would require prompting a warning page that very clearly states it allows logging of the screen for the logging part of it to work.