51–60 of 70 posts
Earlier quoted context omitted.
You don't see it under apps & notifications - - > data usage control?
I have two options on android 9 on a Motorola g7 background data usage and unrestricted data usage. On allows or disallows background data usage, the other allows full access to data when data saver mode is on. When I go to show all permissions it shows me which apps have full network access but does not allow me the option to toggle it.
Earlier quoted context omitted.
You don't see it under apps & notifications - - > data usage control?
I have two options on android 9 on a Motorola g7 background data usage and unrestricted data usage. On allows or disallows background data usage, the other allows full access to data when data saver mode is on. When I go to show all permissions it shows me which apps have full network access but does not allow me the option to toggle it.
Earlier quoted context omitted.
Indeed. On the desktop, this is also known as a firewall. All apps practically think they have "network permissions", but if they actually try to make a connection, it will either time out or return errors.
What operating systems have built in support for firewalling specific applications?
FreeBSD ipfw can firewall by userid, and Android runs each app under a different user (and would probably run apps in jails on FreeBSD, jail IDs are also available for firewalling)
Earlier quoted context omitted.
Indeed. On the desktop, this is also known as a firewall. All apps practically think they have "network permissions", but if they actually try to make a connection, it will either time out or return errors.
What operating systems have built in support for firewalling specific applications?
Earlier quoted context omitted.
This has been possible since Android 8, if not before. You could, per app, from the App Info page: 1. Disallow bg internet access. 2. Disallow fg internet access over wifi. 3. Disallow fg internet access over mobile network. I've been building an app that exposes privacy features like bouncing permissions when apps are in bg (remember AppOps?), firewalling apps by disallowing data usage, setting DNS over TLS to serve…
I have a Pixel 3 with the latest retail release (Android 9/August 1, 2019). I cannot do any of the things you described for any apps via the App Info page. I have permissions sliders for Camera, Contacts, Location, Microphone, Phone, and Storage. None at all for internet access or any specific network. The permissions you list don't appear to be part of Android (8 or otherwise) and are likely after-market extensions…
Do previous Android versions have these vulnerabilities?
The headline is misleading. These vulnerabilities are not in Android 10 but are fixed by Android 10. Which of course means they exist in versions prior to Android 10. Google provides security updates for prior versions so what is not clear from the article is whether these are only fixed by upgrading to Android 10 or whether they were identified during the Android 10 development process but fixes will also be availab…
Earlier quoted context omitted.
LineageOS has the solution to this problem. You can revoke fine grained capabilities while letting the app still think it has the permissions.
Indeed. On the desktop, this is also known as a firewall. All apps practically think they have "network permissions", but if they actually try to make a connection, it will either time out or return errors.
Earlier quoted context omitted.
I've exercised this setting in Xiaomi, Oppo phones (Realme, Vivo, One Plus included) [0]. Unsure if it is in AOSP, but a user reported that its present in their Pixel running 8.1 [0]? You could see if NoRoot Firewall (requires VPN) or Glasswire (may or may not require VPN) help you disallow internet access per-app. [0] https://old.reddit.com/r/oneplus/comments/79g0ue/til_oxygeno...
This might be a Chinese thing: iPhones sold there have an option to disable apps from connecting to WLAN but I haven't seen this on any other SKU.
Earlier quoted context omitted.
This would make things so much safer for everyone but Google has so far refused to do this. (Android DOES have a network permission, but at some point Google decided it should always be allowed)
but at some point Google decided it should always be allowed Not at all surprising, if you consider Google's motives; they both want to appear like they care about privacy and give you an illusion of control, but at the same time they are ultimately an ad company who profits from the lack thereof. A lot of the decisions they make about their products make a lot of sense from this perspective.
- apps can use other ad networks than Google, and blocking network access would bring them more profit (higher app cost / more push for in-app spend)
- they can create separate categories for ad traffic and general network traffic
- having ads as a system element and limiting network access would allow them to cut off other ad networks to some extent, bringing more profit (although that's opening the doors to more talks about monopoly)
Earlier quoted context omitted.
Indeed. On the desktop, this is also known as a firewall. All apps practically think they have "network permissions", but if they actually try to make a connection, it will either time out or return errors.
For Android users, there's the NoRoot Firewall app, which works via the VPN interface.