Shizuku and FindMyDevice (FMD)

sculpordwarfaquarius

I have some questions regarding Shizuku and FMD. I want to use FMD on my device, and to grant some permissions you can use Shizuku (in the past I've also used Termux).

However, to run Shizuku I've done so using Wireless Debugging option. From what I've read on this forum thats a big no-no as it can undermine the whole point of GOS.

Is there any secure way that I can enable the necessary FMD permissions without needing wireless debugging enabled? Even when I enabled this setting with Termux I had to have Wireless Debugging Enabled).

As for Shizuku itself I don't really use anything that requires it. However, if it is enabled without Wireless Debugging is it as detrimental to security? Would it be best to just remove it entirely?

Thanks!

Vincent96

sculpordwarfaquarius Having ADB enabled at all is a serious security risk.

Murcielago

sculpordwarfaquarius

Is there any secure way that I can enable the necessary FMD permissions without needing wireless debugging enabled?

Just a quick note: You could also use the app without ADB, USB debugging or Shizuku if you leave Location Services enabled permanently:

You do not need to grant this permission [WRITE_SECURE_SETTINGS] if you don't want to use the Location Services auto on/off feature. In practice, you can simply keep Location Services enabled all the time, and only grant the normal location permission to apps that you trust not to abuse it.

source: https://fmd-foss.org/docs/fmd-android/granting-secure-settings-access/

Leaving Location Services always enabled raises other privacy (and battery) issues - I just wanted to mention it as you asked for a less invasive installation option. By the way - the link above also lists all installation options.

If you haven't already done so, I can highly recommend reading the FMD documentation—the developers address all risks and potential problems using FMD in a very transparent and easy-to-read manner:

https://fmd-foss.org/docs/fmd-android/overview/

mmobder

sculpordwarfaquarius Is there any secure way that I can enable the necessary FMD permissions without needing wireless debugging enabled?

Use foss aShell app (otg mode) on another GOS phone, do what's needed for fmd and disable adb altogether with developers mode afterwards.
You can't do better than that, IF you trust fmd (and aShell;))) ).

Theoretically one can try inbuilt AOSP terminal instead of aShell, but a while ago it was very limited in access to local resources and I don't know if adb will be available.

sculpordwarfaquarius

Murcielago

I used Shizuku (and Termux) primarily to give my phone the ability to turn location on and off remotely as I always leave it off. Ignoring battery related issues would leaving location on at all times and only granting it to specific apps be a better alternative than giving myself the ability to turn it on and off remotely?

sculpordwarfaquarius

mmobder

What's OTG mode? I have a Pixel 6 with GOS so I could use that.

So would I install aShell on my P6, plug that into my P10, run the command from my P6, then disable developer options on my P10?

Would this just leave my phone with the ability to turn on and off location services without having ADB and wireless debugging enabled?

mmobder

sculpordwarfaquarius yes to all

sculpordwarfaquarius

mmobder Appreciated!