Live data from Hacker News

Tell HN: Your Android carrier can remotely turn settings on

news.ycombinator.com

31–40 of 299 posts

Re: Tell HN: Your Android carrier can remotely turn settings on

#31
post #8

It's part of the mandated law in certain countries so it's normal to be implemented there.

I was not aware this could be done remotely explicitly going against settings the user himself has set.

It’s a carrier setting, you are merely expressing a preference.

Re: Tell HN: Your Android carrier can remotely turn settings on

#32
post #12

IMHO, carrier settings are a small portion and not super impactful part of the phone configuration you see in the settings list. This is actually a somewhat cool feature. Imagine going to another country, jumping on another network and your phone automatically knows what cell bands and towers to connect to. Carriers can't change regular settings like language, lock screen code or background. Just what cell towers you…

The part you mention I was aware of and am actually thankful for. This, at least to me, goes much further. Hence the shock. Updated my post w/more details so it makes more sense (hopefully).

I don't know if this happens in The Netherlands, but if they forced your phone to receive NL Alerts it would seem very reasonable to me. Only the government issues those.

I've understood cell broadcasts are also used for advertisements/otherwise spammy stuff in eg. the US? Then I could understand you considering cell broadcast being turned on being unreasonable

Re: Tell HN: Your Android carrier can remotely turn settings on

#33
> I must say I strongly dislike losing control over my own device. It feels dystopian to me.

Even with a rooted device where perhaps you personally coded up the ROM you are still missing a piece which is the binary blob that runs the baseband radio. That firmware is, afaik, not something which exists in any sort of open-source or rootable manner. It's a closed blob running proprietary software on your phone, and it runs at a lower level than the ROM/OS does. So, even if you go to great lengths to secure most of the software that runs on the device (a noble goal, it's your hardware after all!) then you still must contend with the uncertainty and perhaps risk (depending on your threat model) of that untrusted code running there. You can search around the web for articles covering baseband radio exploits that span the years...

Re: Tell HN: Your Android carrier can remotely turn settings on

#35
In Germany people may not be as used to natural disasters and the like, but where I've travelled where the weather is way more extreme, these are like life saving emergency alerts so you don't get sucked into a tornado like a cow or die in a flood or tsunami. I love how jarring the alerts are, there was an incident in the USA recently where some way too close menu entry got hit at an emergency alert center for a nuclear bomb and people ended up taking cover thinking they were going to get nuked in Hawaii [1]. The USA system you can understand the technical workings of here [2] while this seems to cover more of the technical workings of the EU systems [3] - These are simply service area broadcasts [4]

[1] https://en.wikipedia.org/wiki/2018_Hawaii_false_missile_aler...

[2] https://www.youtube.com/watch?v=sdmkTkWB40Q

[3] https://media.ccc.de/v/osmodevcon2019-107-production-grade-c...

[4] https://osmocom.org/projects/cellular-infrastructure/wiki/Se...

Re: Tell HN: Your Android carrier can remotely turn settings on

#36

Absolutely they can. Carriers have access to the system partition aka We do what we want (hopefully they do what makes sense). This is how bloatware is installed (the things you can't get ride of).

Your thinking is tainted by the american model where you buy carrier locked phones. But no, that is not usually how it works. The system partition can be modified by the party who issues system updates. Normally this would be the company making the phone, such as Samsung. But in the US, some carriers sell modified phones locked to their network, and in that case the carrier is also the one shipping updates.

Re: Tell HN: Your Android carrier can remotely turn settings on

#37
I'm experiencing the opposite; my wife and I have the same iPhone model (13), with the OS up to date. When we bought the phones, 18 months ago, I customized them to have identical settings; while doing that, I also disabled the Amber Alerts. Still, a few weeks ago, our phones started to emit an unheard (til then) sound in the middle of the night: it was an Amber Alert. WTH? did any of the OS updates enable the AA? I looked at the phones and - hey, where did that setting go? the alerts are no longer visible in Notifications. What's weird, is the fact that you can type "Govern" (for Government Alerts) in the Search field, and Notifications comes up - but, when you go into Notifications, there's nothing there.

I googled the issue and it's affecting quite a lot of people. It's unclear whether the culprit is the provider or a long-standing bug in iOS (the first mention I found is a few years old). Some people suggested that you take out the SIM and the options would reappear. Didn't work in my case.

Re: Tell HN: Your Android carrier can remotely turn settings on

#38

(1) I wasn't aware of it, but I am not surprised that something like this was written into the standard (presumably. I doubt carriers rolled their own thing) (2) All the ways I can think off are significantly harder than rooting, so essentially no. (3) I don't really mind that much, I have Google services running on my phone and I am certain those can do far more than my carrier could ever dream off. I have begrudgin…

> written into the standard

What standard are you referring to?

Re: Tell HN: Your Android carrier can remotely turn settings on

#39
post #32

Earlier quoted context omitted.

The part you mention I was aware of and am actually thankful for. This, at least to me, goes much further. Hence the shock. Updated my post w/more details so it makes more sense (hopefully).

I don't know if this happens in The Netherlands, but if they forced your phone to receive NL Alerts it would seem very reasonable to me. Only the government issues those. I've understood cell broadcasts are also used for advertisements/otherwise spammy stuff in eg. the US? Then I could understand you considering cell broadcast being turned on being unreasonable

The fact the government issues the alerts doesn't mean the government won't get pressured into sending spammy messages.

For example, what politician could turn down the grieving parents of a kidnapped child, when they call for using the emergency alert system for missing children?

But if I work from home, and there aren't any kidnapped children in my home, then waking me up at 5am with a missing child alert just inconveniences for no benefit to anyone.

Re: Tell HN: Your Android carrier can remotely turn settings on

#40

> I must say I strongly dislike losing control over my own device. It feels dystopian to me. Even with a rooted device where perhaps you personally coded up the ROM you are still missing a piece which is the binary blob that runs the baseband radio. That firmware is, afaik, not something which exists in any sort of open-source or rootable manner. It's a closed blob running proprietary software on your phone, and it r…

For the PinePhone you can install a free OS running the Baseband Processor: https://hackaday.com/2022/07/12/open-firmware-for-pinephone-...

Probably illegal and the firmware running the radio hardware is still proprietary.

Post reply on HN