• Ghostalmedia@lemmy.world
    link
    fedilink
    English
    arrow-up
    131
    arrow-down
    1
    ·
    9 days ago
    1. It’s also android phones. All of the shots in the article are of android phones.

    2. This is likely just recording sessions of the carrier’s app, not everything on your phone. Session recording for CS and UX is pretty common these days. It can be impossible to identify a problem unless you actually see what is happening in the app.

    That said, you have to ask for consent for this shit. A lot of companies don’t alert customers when they release a new tool that requires privacy consent.

    • dual_sport_dork 🐧🗡️@lemmy.world
      link
      fedilink
      English
      arrow-up
      31
      ·
      9 days ago

      This is so. At the bottom of the article it says:

      To help us give customers who use T-Life a smoother experience, we are rolling out a new tool in the app that will help us quickly troubleshoot reported or detected issues. This tool records activities within the app only and does not see or access any personal information. If a customer’s T-Life app currently supports the new functionality, it can be turned off in the settings under preferences.

      So yes, it can only see itself, i.e. within the T-Mobile app. It’s still dumb.

      I’m not well versed enough in Android app development to answer whether or not one userspace app can even access the screen contents of another app without root or special permissions, but it wouldn’t surprise me if there are several roadblocks in that path on the part of the OS for obvious reasons.

      • underline960@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        4
        ·
        9 days ago

        For quality assurance reasons, we’ve defined ‘within the app’ as ‘everything on the phone while our app is running in the background’.

        • pixely@lemmy.world
          link
          fedilink
          English
          arrow-up
          8
          ·
          8 days ago

          That’s not possible without a permission prompt (on both iOS and android). So there’s no changing the goalposts like you suggest, without the user giving explicit permission.

        • disguy_ovahea@lemmy.world
          link
          fedilink
          English
          arrow-up
          8
          ·
          8 days ago

          The API for iOS screen recording is sandboxed to the app itself. There is currently no system-wide screen recording API for developers.

          • kalleboo@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            ·
            edit-2
            8 days ago

            iOS does have an API for apps to record the screen throughout the OS these days through Broadcast Extensions, but it has to be user-initiated through the control center screen recording toggle (where they then get to pick what app to record the screen to instead of just saving as a video), it wouldn’t do that people think the T-Mobile app is doing

            • disguy_ovahea@lemmy.world
              link
              fedilink
              English
              arrow-up
              3
              ·
              8 days ago

              I see it now. Yes, broadcasting is available, but with the limitations you’ve specified. Thanks for the update/correction!

      • AnAmericanPotato@programming.dev
        link
        fedilink
        English
        arrow-up
        5
        ·
        9 days ago

        I’m not well versed enough in Android app development to answer whether or not one userspace app can even access the screen contents of another app without root or special permissions

        This requires special permissions and explicit user approval every time an app starts screen recording, plus it shows a red notification whenever screen recording is active.

        I think you could get by with a one-time user approval as a device administration or assistive app permission, which you’d need to manually grant in Settings. Unlikely anyone would do that by accident.

        That might be different for system-level apps. I haven’t bought a carrier-branded phone in 10+ years so I’m not sure what that’s like these days.

        • Hello Hotel@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          9 days ago

          Last I checked, you can have a system app as an accessability provider and be enabled by default

      • bluemellophone@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        ·
        9 days ago

        That would be a pretty big security hole in iOS if that was allowed, but it isn’t. Notification and other UI elements are rendered on top of the underlying app, which does not have access to or cannot see the full screen’s canvas. We can see practical implementations of this “snapshot” test feature in code:

        https://github.com/uber/ios-snapshot-test-case

      • Ghostalmedia@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        9 days ago

        Not the tools I’ve used. A lot of them aren’t even actually recording video. They’re recording the user interactions in-app, then playing those back on a cached version of the experience that is hosted with the session recording company.

  • RickRussell_CA@lemmy.world
    link
    fedilink
    English
    arrow-up
    35
    arrow-down
    1
    ·
    9 days ago

    with price increases a frequent occasion in recent times

    Good grief this article was padded for length. Who speaks like that? How hard is it to write “with recent price increases”?

    • lefixxx@lemmy.world
      link
      fedilink
      English
      arrow-up
      45
      ·
      9 days ago

      I agree completely with what you’ve said. Your perspective is thoughtful, well-reasoned, and aligns with my own understanding. It’s refreshing to see such clarity, and I support your view without hesitation. You’ve made an excellent and persuasive point overall.

      • RickRussell_CA@lemmy.world
        link
        fedilink
        English
        arrow-up
        12
        ·
        9 days ago

        No dialogue is ever static; every conversation offers an opportunity to reassess and refine one’s viewpoints in light of new insights. In coming to genuine agreements, we learn not only about others but also about ourselves, gaining awareness of how our internal values align with the broader spectrum of social beliefs.

  • InfiniteHench@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    ·
    8 days ago

    This type of gross invasion should be illegal and land executives and developers in jail. Look at how Germany jailed VW executives and developers behind a massive emissions testing fraud incident. Enough is enough

    • Ghostalmedia@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      9 days ago

      Depends on the tool. A lot of them are only logging interactions. They then “play” those interactions over a cached version of the experience to show you a “recording.”

  • RaptorBenn@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    3
    ·
    8 days ago

    If it was in the EULA, it wasnt a secret. Our ignorance of t&c’s doesnt excuse us.

    We should all be advocating for limited T&C’s on just about everything, or atleast be concious of our own agreements.