Android P to Block Apps From Monitoring Device Network Activity

-

Android P to Block Apps From Monitoring Device Network Activity



android-p-network-activity-selinux
Do you know that any app you have installed on your Android phone can monitor the network activities—even without asking for any sensitive permission—to detect when other apps on your phone are connecting to the Internet?

Obviously, they cant see the content of the network traffic, but can easily find to which server you are connecting to, all without your knowledge. Knowing what apps you often use, which could be a competing or a financial app, "shady" or "malicious" app can abuse this information in various ways to breach your privacy.

But it seems like Google has planned to address this serious privacy issue with the release of its next flagship mobile operating system.

With Android P, any app will no longer be able to detect when other apps on your Android device are connecting to the Internet, according to the new code changes in Android Open Source Project (AOSP) first noticed by XDA Developers.
"A new commit has appeared in the Android Open Source Project to 'start the process of locking down proc/net,' [which] contains a bunch of output from the kernel related to network activity," XDA Developers writes. 
"There's currently no restriction on apps accessing /proc/net, which means they can read from here (especially the TCP and UDP files) to parse your device's network activity. You can install a terminal app on your phone and enter cat /proc/net/udp to see for yourself."

However, the new changes applied to the SELinux rules of Android P will restrict apps from accessing some network information.
android-p-network-activity
The SELinux changes will enable only designated VPN apps to access some of the network information, while other Android apps seeking access to this information will be audited by the operating system.

However, it should be noted that the new SELinux changes are coming for apps using API level 28 running on Android P—which means that apps working with API levels prior to 28 continue to have access to the device' network activities until 2019.

A few custom ROMs for Android, such as CopperheadOS, have already implemented these changes years ago, offering better privacy to their users.

As XDA developers pointed out, this new change introduced to the Android operating system appears to be very small that users will hardly notice, "but the implications for user privacy will be massive."

Comments

Post a Comment

Popular posts from this blog

Kali Linux vs Ubuntu – Which Distro is Better for Hacking?

-
Image
Kali Linux vs Ubuntu – Which Distro is Better for Hacking? Kali Linux is the most popular penetration testing and hacking Linux distroibution and Ubuntu is the most popular Linux distribution. Since it is kind of common knowledge that Linux is a more convenient OS to use for hacking than Windows , the next question is a no-brainer; which Linux distro is the best to use for hacking ? But what is hacking anyway? And why does it matter which distribution is being used? Let’s get to it. What Does It Mean to Hack? Computer hacking is the act of using technical knowledge to overcome a problem. With that in mind, a hacker can refer to any skilled programmer but thanks to pop culture the hacker term is now synonymous with a security hacker – one who uses technical skills to create bugs to exploit security weaknesses in computer systems and break in. In a nutshell, the typical hacker is a security expert whose job is to break into computer systems using ingenious methods, e...
Read more

5 Basic Principles of Linux System Security

-
5 Basic Principles of Linux System Security It is still common that people do not know where to start when it comes to information security. With 5 basic principles we can improve the Linux system security and question ourselves if we have done enough. 1. Know your system(s) The first principle is about knowing what your system is supposed to do. What is its primary role, what software packages does it need and who needs access? By knowing the role of the system you can better defend it against known and unknown threats. Security Measures: Password policy Proper software patch management Configuration management Documentation 2. Least Amount of Privilege Each process running, or package installed, might become a target. Security professionals call this the “attack surface”. What you want is to minimize this attack surface by removing unneeded components, limit access and by default use a “deny unless” strategy. This latter means that access by default is blocked, u...
Read more

Curious Case Of Linux Distribution Code Names

-
Image
Curious Case Of Linux Distribution Code Names   Have you ever wondered about the code name of the latest release of your favorite Linux distribution? The upcoming Linux Mint 18 has been codenamed Sarah . Ubuntu 16.04 will be called Xenial Xerus. The list goes on like that. The question about the code-names is really trivial. It doesn’t make any difference to how a particular Linux distribution function. Yet, as a curious Linux user, you might want to know the logic behind codename of a release. After all, the code name is an integral part of a release and the dev team puts an effort for that as well, isn’t it? I am going to tell you about the logic behind code naming of some of the most popular Linux distributions. Sit tight, this is going to be a fun ride :) Ubuntu version numbering and codenaming One of the most popular Linux distribution, Ubuntu follows a biannual release cycle with one release coming in April and other in October....
Read more