In recent days, T-Mobile customers stumbled upon an unannounced setting in the T-Mobile T-Life app that raised some eyebrows and has created a bit of a freakout. A new setting called “Screen recording tool” was found on select devices and was enabled with a description that doesn’t... #TMobile
It’s also android phones. All of the shots in the article are of android phones.
This is likely just recording sessions of the carrier’s app, not everything on your phone. Session recording for CS and UX is pretty common these days. It can be impossible to identify a problem unless you actually see what is happening in the app.
That said, you have to ask for consent for this shit. A lot of companies don’t alert customers when they release a new tool that requires privacy consent.
To help us give customers who use T-Life a smoother experience, we are rolling out a new tool in the app that will help us quickly troubleshoot reported or detected issues. This tool records activities within the app only and does not see or access any personal information. If a customer’s T-Life app currently supports the new functionality, it can be turned off in the settings under preferences.
So yes, it can only see itself, i.e. within the T-Mobile app. It's still dumb.
I'm not well versed enough in Android app development to answer whether or not one userspace app can even access the screen contents of another app without root or special permissions, but it wouldn't surprise me if there are several roadblocks in that path on the part of the OS for obvious reasons.
I’m not well versed enough in Android app development to answer whether or not one userspace app can even access the screen contents of another app without root or special permissions
This requires special permissions and explicit user approval every time an app starts screen recording, plus it shows a red notification whenever screen recording is active.
I think you could get by with a one-time user approval as a device administration or assistive app permission, which you'd need to manually grant in Settings. Unlikely anyone would do that by accident.
That might be different for system-level apps. I haven't bought a carrier-branded phone in 10+ years so I'm not sure what that's like these days.
It's not possible on Android, which is incredibly disappointing because I play a card game exclusively on mobile, and would love to use a collection manager and stat tracking app. These exist for PC and Mac, but not for mobile because of the very hard no-record-other-apps wall.
That would be a pretty big security hole in iOS if that was allowed, but it isn’t. Notification and other UI elements are rendered on top of the underlying app, which does not have access to or cannot see the full screen’s canvas. We can see practical implementations of this “snapshot” test feature in code:
Not the tools I’ve used. A lot of them aren’t even actually recording video. They’re recording the user interactions in-app, then playing those back on a cached version of the experience that is hosted with the session recording company.
Alright so I connect back like two hours after my comment, somebody gets ruffled at my language and they were downvoted into oblivion in response, that's actually pretty funny, 5/7 would do again
I agree completely with what you've said. Your perspective is thoughtful, well-reasoned, and aligns with my own understanding. It's refreshing to see such clarity, and I support your view without hesitation. You've made an excellent and persuasive point overall.
No dialogue is ever static; every conversation offers an opportunity to reassess and refine one’s viewpoints in light of new insights. In coming to genuine agreements, we learn not only about others but also about ourselves, gaining awareness of how our internal values align with the broader spectrum of social beliefs.
Man, that pendulum swing from “the uncarrier” to full blown horrible large corporation. That merger with Sprint sure has made things better for customers, right?
Yup. Worked briefly for a company that would "snapshot" the browser view quite often, enough where if an issue arose we could somewhat replay the user's interactions to try and repro the issue.
This type of gross invasion should be illegal and land executives and developers in jail. Look at how Germany jailed VW executives and developers behind a massive emissions testing fraud incident. Enough is enough
Tons of corporate software out there will record user sessions in order to debug issues and replay a user’s interactions so an engineer can review it. Take a look at tools like Hotjar, Logrocket, and Fullstory.
Not making excuses for them and it’s probably less insidious than this makes it out to be, but people should be aware that this is not uncommon at all.
Depends on the tool. A lot of them are only logging interactions. They then “play” those interactions over a cached version of the experience to show you a “recording.”