18
submitted 1 year ago* (last edited 1 year ago) by Moonrise2473@feddit.it to c/askandroid@lemdro.id

On a throwaway Samsung Galaxy with American ROM, I installed some Chinese apps. When I uninstall them, the browser opens with a specific "uninstall survey". How that is possible? Are they exploiting some os weakness or it's permitted by the apk uninstall API?

The bad actors are:

  • sogou keyboard
  • Tencent video
  • weibo
top 8 comments
sorted by: hot top controversial new old
[-] Illecors@lemmy.cafe 10 points 1 year ago

Warning - precision guesswork ahead.

In computer programming there's a concept of a hook - do something before or after an event. It very well might be that "uninstall" event has hooks and one of them is "open this website after it's done".

[-] rozPierog@lemdro.id 6 points 1 year ago

If you are running Android <11 then apps could see the list of apps installed on the device https://developer.android.com/training/package-visibility

Pure speculation (and how I would do it) is to have apps A, B, C check periodically the list of installed packages and if one of them disappeared from the list I would trigger this survey. Of course that requires that all apps are from the same developer, and it won't trigger this survey on the last app uninstall

[-] Rin@lemm.ee 4 points 1 year ago

There seems to be some really old explanation for this but maybe there's an updated version of this thread: https://stackoverflow.com/questions/19475765/listen-to-own-application-uninstall-event-on-android#22061900

[-] limerod@reddthat.com 2 points 1 year ago

What android version is that Samsung galaxy running? Does it happen in newer android versions like 12 and 13? The explanation and the stack link explain it for old devices. I'm not sure how it's being done for newer smartphones, if at all.

[-] Moonrise2473@feddit.it 2 points 1 year ago

no it's like 8 years old, not recent

plus those apps has been sideloaded from apk

[-] limerod@reddthat.com 2 points 1 year ago

That explains it. Older android did not have the safeguards modern-day android does. Anyway, don't sideload shady apps or use old smartphones that are not updated today. These webpage opening things used to happen in the old days, which was annoying.

[-] breakingcups@lemmy.world 2 points 1 year ago

I wonder if they have some sort of sister service that does the monitoring of the install status.

[-] Moonrise2473@feddit.it 3 points 1 year ago* (last edited 1 year ago)

i have the feeling they had a permanent service running in memory like a virus just for this purpose, triggering the webpage launch when killed (maybe could listen the reason for kill?), because the device was ultraslow (old and just 1gb ram did not justifiy a 10 sec delay in screen rotation) until i uninstalled them.

edit: but it could be it was triggered by a sister service. For example, when i uninstalled wechat (still from tencent) it did not give me the uninstall survey like i got a few minutes earlier with tencent video.

Same for sogou keyboard, when i uninstalled sogou search i did not get the survey. So it could have been that sogou search detected that sogou keyboard was uninstalled and triggered the survey

this post was submitted on 11 Sep 2023
18 points (100.0% liked)

Ask Android

2070 readers
5 users here now

A place to ask your questions and seek help related to your Android device and the Android ecosystem.

Whether you're looking for app recommendations, phone buying advice, or want to explore rooting and tutorials, this is the place for you!

Rules
  1. Be descriptive: Help us help you by providing as many details as you can.
  2. Be patient: You're getting free help from Internet strangers, so you may have to wait for an answer.
  3. Be helpful: If someone asks you for more information, tell us what you can. If someone asks you for a screenshot, please provide one!
  4. Be nice: Treat others with respect, even if you don't agree with their advice. Accordingly, you should expect others to be nice to you as well. Report intentionally rude answers.
  5. No piracy: Sharing or discussing pirated content is strictly prohibited. Do not ask others for a paid app or about how to acquire one.
  6. No affiliate/marketing links: Posting affiliate links is not allowed.
  7. No URL shorteners: These can hide the true location of the page and lead people to malicious places.
  8. No lockscreen bypasses: Please do not comment, link, or assist with bypassing lock screens or factory reset protection.
  9. No cross-posting: Please take the time to make a proper post instead of cross-posting.
Other Communities

founded 1 year ago
MODERATORS