Live data from Hacker News

System Hardening in Android 11

security.googleblog.com

191–200 of 211 posts

Re: System Hardening in Android 11

#191

Earlier quoted context omitted.

No one made youtube-dl GUI wrapper app, is it really?

They did, it's called NewPipe

Does NewPipe support all the sites that youtube-dl does? I know they cover more than just YT itself, but youtube-dl's coverage is massive.

Re: System Hardening in Android 11

#192
post #19

I'm mostly worried about Termux. I can't imagine a phone without a decent terminal and I feel my options are going to be severely limited.

Why would termux not work in 11?

Android 10 poses significant friction with termux. So far I believe the solution has been to target android 9, but google will not allow that indenfitely and updates to play store must likely at some time target android 10.

That is my very informal and perhaps very obsolete view of it. But I could be misremembering details.

https://github.com/termux/termux-packages/wiki/Termux-and-An...

Re: System Hardening in Android 11

#193

Earlier quoted context omitted.

In my case I am stuck with a spare phone on android 8 since they banned wireless scanning from 9 onwards. it's a matter of functionality over perceived security. fed up with google. will check out the PinePhone

No, they just rate limited it and it's toggleable in 10.

appears android 10 has been abandoned by Sony for my main driver (mid 2017). time to try the custom ROMs which are only just appearing..

Re: System Hardening in Android 11

#194

Earlier quoted context omitted.

I'd say this is the biggest issue. I own both a rooted, unlocked Android phone and a locked Samsung tablet. I have no way to know how safe any particular custom ROM is, so there's no way I'm willingly going to use any of the banking-/payment-related apps on my phone. I find it baffling that people put their trust in people who are largely anonymous and have no accountability.

Depending on what your goals are, I'd recommend going down the route I chose: run AOSP. Tagged releases of AOSP are the same base code that all the retail distributions of Android are based on, so should be just as safe. If you have a Pixel device, the RattlesnakeOS project [0] will allow you to run your own automated AOSP distro, complete with OTAs, on AWS. It also supports adding a few modifications like MicroG. Al…

That's interesting, thanks. It's going to have to wait until I buy a new phone though, since my phone doesn't have anything like this. Which leads to the next problem. I bought my phone because of its crazy long battery life. Going to a Pixel is a significant sacrifice, which again annoys me about the state of Android.

Re: System Hardening in Android 11

#195
post #137

Earlier quoted context omitted.

That's my point. Everything available for Android proper is a toy. I have a Tab S6 with 8GB of RAM and 256GB of storage -- it can do a lot more than play Netflix.

My point is that I am fine with it, I don't want to code on the go on my phone, beyond some toy programming while on the bus, train or waiting for check in. Coding on Nokia Communicator (even the latest versions) or Nokia's Linux based phones/tablets was also not the best ergonomics. Also I don't care about having a Linux CLI or something like Termux, any kind of devenv is ok for me, so to extend my list, if you want…

I think you missed that my Android device (the Tab S6) is a full 10" tablet with a keyboard and trackpad.

Re: System Hardening in Android 11

#196

Earlier quoted context omitted.

Where's the love for Android, though?

You mentioned Microsoft and Apple they have shells etc..on desktop OSes not phones.

My Android device is a tablet with a keyboard and trackpad. It's not all just phones.

Re: System Hardening in Android 11

#197
post #137

Earlier quoted context omitted.

My point is that I am fine with it, I don't want to code on the go on my phone, beyond some toy programming while on the bus, train or waiting for check in. Coding on Nokia Communicator (even the latest versions) or Nokia's Linux based phones/tablets was also not the best ergonomics. Also I don't care about having a Linux CLI or something like Termux, any kind of devenv is ok for me, so to extend my list, if you want…

I think you missed that my Android device (the Tab S6) is a full 10" tablet with a keyboard and trackpad.

No I did not, from my point of view we should embrace new computing models instead of trying to turn everything into a PDP-11, and from that point of view there is AIDE- IDE, and plenty of other developer like experiences.

If none of them are good enough, it is like my business professor used to say, market opportunity.

I also own a tablet with keyboard, by the way.

More Playgrounds, less POSIX CLI.

Re: System Hardening in Android 11

#198
post #140

Earlier quoted context omitted.

True, but it will allow the use of official APIs instead and do the application the Android way. Whatever Linux calls Termux makes use of, they aren't allowed and work by chance. Here are the official NDK APIs, https://developer.android.com/ndk/guides/stable_apis Anything else is considered unstable, not guaranteed to work across devices or OS updates, or even selected for SE/seccomp validation. Android is not Linux,…

My point is that the permission issue is completely unrelated to the unstable API issue. If you don't have permission to do something through raw Linux syscalls, you won't have permission to do it through the official stable API either.

I have done Android coding since version 2.1, never felt the need to do raw Linux syscalls.

This is what many seem to fail to understand, Android is not a Linux distribution as such, trying to pretend otherwise will only lead to disappointment.

Re: System Hardening in Android 11

#199
post #198

Earlier quoted context omitted.

My point is that the permission issue is completely unrelated to the unstable API issue. If you don't have permission to do something through raw Linux syscalls, you won't have permission to do it through the official stable API either.

I have done Android coding since version 2.1, never felt the need to do raw Linux syscalls. This is what many seem to fail to understand, Android is not a Linux distribution as such, trying to pretend otherwise will only lead to disappointment.

But how is that relevant to the permissions issue we're discussing?

Re: System Hardening in Android 11

#200
post #197

Earlier quoted context omitted.

I think you missed that my Android device (the Tab S6) is a full 10" tablet with a keyboard and trackpad.

No I did not, from my point of view we should embrace new computing models instead of trying to turn everything into a PDP-11, and from that point of view there is AIDE- IDE, and plenty of other developer like experiences. If none of them are good enough, it is like my business professor used to say, market opportunity. I also own a tablet with keyboard, by the way. More Playgrounds, less POSIX CLI.

New computing models are more restrictive and less focused on creation and more on consumption. That's fine for some people but this is hacker news. If there were a new computing model that supported my use case, fine, but there isn't. Playgrounds suck for adults. I've tried every Android editor and IDE and it's like going back 20 years.

Our hardware is now powerful enough to support all computing models in whatever sandbox you want. There's no reason I have to give up my POSIX CLI. Personally I'd prefer Android native GUI software capable of interfacing with a Linux technology stack that can run programming languages, web servers, etc. This should be obvious and yet somehow it's not available.

No market opportunity because the OS is locked down making all this impossible.

Right now on Android I'm using Termux with an proot Ubuntu userland and running code-server which allows me to run VS Code as a PWA on Android. This is, by far, the best configuration I've found. But soon Google will make even this hack on hack impossible.

Post reply on HN