Emil

@JimFell Even with my complicated Answer "attempt" below, that is, with cache folder locked, the other day Google updated my native keyboard app with it's own (and turned on data collection on it automatically) I wanted to uninstall it, but it somehow broke the native one so that it's not even showing up as a choice. So I have to reinstall whole system to bring it back. But then what, it's done it once it can do it again. No idea how to block ALL updates. As for iOS, they auto-download OS (can't disable this) and then trick you to agree to install it. TvOS profile can block it for now though

Hi @frans, the thing is it's not just the bandwidth/costs. It's also installation of unwanted software that I'm trying to prevent. Also, I download apps and updates over the phone's internet as I presently don't have access to WiFi. And another thing is, this updater "listens" for state changes so if you switch to WiFi it prioritizes Google things and cues them first immediately. In the work-around I posted below it's basically a race condition I would download some app before it realizes that it's possible to download updates, but then I lock it again, but that's not 100% reliable way.

Thanks @Stan this is pretty disgusting practice that they're engaged in, forcing automated downloads/updates/installations. I would ignore it if they only used this "backdoor" for installing critical security fixes, but they're downright abusing it. Doubling the size of their system and little by little slowing down my phone, eventually making me buy new one (Planned Obsolescence). And as expected Google is being evasive in the thread you mentioned and even knowingly post false suggestions. My solution below works 100% blocking all auto-updates. But it's too ugly to mark it as "accepted" ;)

@AndrewT. Well, I didn't mention it's a malware, but I placed a tag "malware" because the behavior is resembling that of a real malware. In particular, something that downloads and installs without permission, and evades user's removal attempts by restoring itself once removed. Also breaking certain functions/compatibility, changing infrastructure and compromising security. Not to mention incurring actual financial costs of downloading. There's actually only one reason it doesn't qualify to be labeled as "malware" - it's made by Google and it's "labeled as" part of operating system.

@Firelord Thanks for the Tasker hit, I'll need this for sure! I haven't tried Izzy's suggestion yet, because I have a suspicion that if it works, it'll prevent installation, but the "thing" will still keep trying, downloading the app over and over. It's like a Terminator, I don't think it will give up... But another reason is, I wanted to use this app as an indication that Google is now unable to download/install things without permission. Ability of anything, (no matter how secure it claims to be) to download/install things without permission is a backdoor and can be exploited.

Well, that didn't do it unfortunately. So for now rolling it back to where Google was less aggressive. (details in Update)

@izzy So as you mentioned that system apps can obtain the permission, and now that they're no longer system apps they "shouldn't" be able to. I tested the remote installation from the google store on the computer, which sends the command to the phone to do the download/installation. And it said that installation will start shortly. But it didn't. And neither did the *Instant Apps came back. Success? :) perhaps! I'll do a bit further testing to confirm.

Well, I think I used some trickery, but basically I removed /system/priv-app/GmsCore/GmsCore.apk=com.google.android.gms and /system/priv-app/Phonesky/Phonesky.apk=com.android.vending and reinstalled both from backups made of the latest version. So both are now in /data/app/ . Including the Instant Apps, which is so darn quick I don't know how it had time to install, while I was going through login I think. So now I uninstalled it again. With no system apps to bring it back, I wonder if it'll come back. Thanks, the link is working now.

@Izzy aha, I found this individual setting. Every app seems to be enabled for Auto-update. You're saying, all the apps which came with the device were installed before this option was switched so they can ignore it? But default is "install via WiFi only", and I wasn't using WiFi since this fresh reinstall. Also it seems the way the global option behaves is when set to disable, each app's auto-update is switched off, and when enabled, enables each individual app. Btw, the link you posted requires pw. I wonder if I can install com.google.android.gms as at user level, and if this will do anything

@Izzy not 100% sure what you mean. In the Play Store, there's just one setting that can be set to "Do not auto-update apps" this you mean by global right? Or is there another setting that can be set regarding auto-updates? Regarding critical updates, I wasn't aware there was anything that had that sort of permission. If so, they can interpret critical in any way they wish I suppose.

Well, I just restored the phone and AFWall works fine. The thing is, after I updated regular Google Services the problem didn't start, but after the component got installed it broke the firewall. (Maybe it's the "lucky" combination) But the main question is - how is it able to re-download, and re-install, itself? Nothing should be able to do that. This is a breech of security and programming ethics in general.

That is a very good point. It is a user-level app, however it is connected to "Google Services" which evidently can re-download and re-install it if you uninstall it. Beyond that, I can't comment on their relationship. I have assumptions, but they're not based on facts so I'll omit them. But I'm guessing they just made it a little easier for a "real" malware/virus to infiltrate the system. Did you get a confirmation that "GP services for Instant Apps" will be/has been installed? Or that it is active, doing updating/downloading

Hi @Firelord Just to be clear, I'm talking about a "Google Play services for Instant Apps", not the standard "Google Play services". The latter is a recent development and is behaving like a malware (although it is official Google app). I wouldn't go too much in detail on the app functions it broke mainly because it will likely be dependent on a device/ROM (I'm running standard ROM and it is rooted, but for the sake of the question I'd like to find a "normal" non-rooted solution). AFWall it broke in such a way that it gives me "Failed to apply rules" error, intermittently.

Just the whole first paragraph is a duplicate

and I never said it's malware, in original or edited

Can't you just remove the part that's duplicate?

But you're still saying everything I mentioned in original question

And I'll just delete all my comments too as irrelevant

Cool, so if you could change the answer to anything that doesn't include what I already said, that would be nice

Really, I wish there was a clear distinction between Hardware and OS, but then Google would loose its market...

And I'll be downloading whatever ROM you are working now lol

knowing google, they'll just go around that. "Google Services" is the parent, at least that you have to update, but they'll make it so that you have to update the "whole". Size/stability/security all goes down the drain

Well, I can pretty much guess where they're going with this. First they will make a "common library" and then if you don't update it all your apps will stop working. This what they're doing now is not very proper, auto-downloading/updating without permission, that's just malware domain but later they will make an "option" only you'll be stuck with non-working apps

Or maybe you can include a root solution lol

You should mention in the comment section that "I don't think it can be done" or something to that regard.

Still, it takes away from the question when you say it can't be done.

But you don't know that for sure. How can you be sure there is no way, even in non-rooted device?

I never called it malware actually. Only in the comments section I mentioned that "it's behaving like a malware" which it does.

It's a big issue that this question is raising I think. It should get more exposure. It would be sad to see it fade away...

I mean tell me what you said that I didn't say?

But you didn't answer it, can't you see you stated exactly what I said?

And if there is too much written sometimes people skip it. I mean who wants to read volumes and volumes of pages, you know what I mean? Only from that perspective I thought that it would be best to remove it

I don't mean braking a policy as a law or something. I only mean to say that the site has a format of Question and Answer, and that your answer didn't really fit into that. My original question excluded root, then I made an edit to include it to get wider range of answers. When you see a question and then you see an answer that makes people think that it is already answered.

hey

The only change I made is to include root as a possibility. How is this related to you copy-pasting my Original Question as an Answer? This is an Answer section, do you believe you provided an answer? It's not about me or you, who's right or who's wrong. It's a database of Q/A and answered questions help others who are searching for the same questions. I think we're responsible adults not kids in kindergarten that need a moderator. I don't mean anything of what I said in any offensive way. I do appreciate you trying to help. Just no other way to state the obvious.

It's fine that you can't think of a simple solution, but you see this is a Question-Answer board and there's also a comment section. If you're posting an Answer, but saying you can't think of a solution, well it's not really an answer is it? You're saying "This isn't malware" I didn't say it is a Malware. You are explaining how to switch it off and even posted a link to do that. But I already mentioned it in the original question even with screen shots. I'm not forcing you to delete this "Answer" just that it doesn't comply with site policies. Do you believe it is answering the question?

The only thing you said that I didn't already mention is that It will be included with new devices as a system app. And I agree with that. But how is this answering my question? In my question I specifically state that it's part of Google services and that Play store needs it and Gmail also, and that it keeps installing itself.

I have a screen shot above where it says it is from Settings/ Google /Instant Apps and you're posting a Reference link to google site where it can be disabled. It just doesn't make any sense.

How is this an answer if you're telling exactly what I said above? Except I didn't call it a malware. I mean I even posted a screenshot of where it is shown as disabled. I appreciate that you're trying to help but could you delete this "answer" please?

@Rozenn got some more questions but too sleepy to ask :) I'll go hide under the mosquito net before one of them decides to alter my own genetic code... Hope we can chat again soon! Thanks a lot for helpful info and insight

@Rozenn thanks, was looking for that video too

@Rozenn I see, so the "time" actually isn't needed... just the steps to complete all the stages. For example the cells near the toe make the toe nail, and since those cells aren't there yet, you can't make a toe nail before the toe which makes things easier

@Rozenn the time factor I didn't think of when I asked the original question. As you mentioned, as embryo develops the sequence of events is vital. So this means that amount of initial information is even greater than I thought...

@terdon makes sense

@Rozenn well, at this point, I'm at a stage of my development minor errors aren't so important either, rather trying to grasp the fundamental processes on conceptual level

@terdon I think I might need some time to come up with some good questions meanwhile :)

@Rozenn thanks, looks interesting

Ah, the video you linked to in the post seems unavailable...

@terdon may I ask you some questions on the subject too?

You guys have given me a lot of info to think/read about... this subject is so immense that it's hard to just "dig into"