Android may soon restrict on-device ADB

Post by thewebguyd » Sat, Jul 25, 2026, 4:28 PM UTC

microtonal wrote: post #30

I am generally in favor of security improvements, but I do not really see much of a benefit here. This attack vector requires both that the user enabled developer settings and that they have remote adb enabled. So, this does not seem to be a realistic attack vector for 99.9% of the users and most of the other 0.1% probably know what they are doing. The other proposed change (to restrict access to certain interfaces o…

Post by zb3 » Sat, Jul 25, 2026, 4:31 PM UTC

ignoramous wrote: post #49

The article overlooks security implications from spyware, which is a huge problem not only for financial applications, but personal safety, too [0]. Per FTC, a stalkerware will: geo locate, read call list & record calls, read notifications, texts, & possibly emails, access gallery, camera, & files, and monitor network activity. [1] You could do all of those with "on-device adb" (in some cases, with just the appropria…

Post by ryandrake » Sat, Jul 25, 2026, 4:35 PM UTC

zbentley wrote: post #289

Zak wrote: post #259

Earlier quoted context omitted.

A long time ago, I fixed Windows machines for pocket change. I can confirm some users will make bad decisions no matter what warnings they're given. I think the impulse for an OS vendor to try to make such mistakes impossible is about as wrong as selling knives dull so people can't hurt themselves. A knife that can't cut its user is useless as a knife.

Eh, this is a tough conversation for engineering-minded folks because the right answer is probably somewhere in the middle of a few different variables. Too far towards trying to make mistakes impossible (which is easy for corporations to talk themselves into because it also makes them money and moat) and you make devices useless. Too far towards full user control and you get difficulties in support and security issu…

Post by righthand » Sat, Jul 25, 2026, 4:46 PM UTC

createful wrote: post #254

999900000999 wrote: post #219

I just installed CachyOS on one of my laptops. I like Open Suse a bit more, but my vpn and a few other applications work better on Arch. Android is turning into the iOS/OSX/Win11 model. It’s not your device, you’re just renting it. You need permission to install applications, or do anything else outside of consuming subscription services. Where are the Linux phones ?

Linux phones exist but work on a limited number of devices (see PostMarketOS) or Linux primary devices like Purism or Pinephone (which I've heard are expensive). That's the primary issue, you either need to buy an expensive and potentially underpowered phone OR have one that is supported most of the way with PostMarketOS (Wifi, SIM card, GPU, etc. sometimes may not work even though the phone can boot PostMarketOS). I…

Post by wartywhoa23 » Sat, Jul 25, 2026, 4:49 PM UTC

juleiie wrote: post #151

TeMPOraL wrote: post #143

Earlier quoted context omitted.

Follow up question: how many of those still let you log in and authorize transfers without relying on their mobile app as required second factor?

This is all inevitable direction over long period of time What’s worrying is that noone protests about it It doesn’t suprise me that corporations and governments want the laziest, most „protective” laws passed that extend their power. But why noone, absolutely noone puts some kind of resistance to it? Government and citizens are at eternal conflict of interests. It has been this way and it will be this way forever. Y…