Android P to Block Apps From Monitoring Device Network Activity

-

Android P to Block Apps From Monitoring Device Network Activity



android-p-network-activity-selinux
Do you know that any app you have installed on your Android phone can monitor the network activities—even without asking for any sensitive permission—to detect when other apps on your phone are connecting to the Internet?

Obviously, they cant see the content of the network traffic, but can easily find to which server you are connecting to, all without your knowledge. Knowing what apps you often use, which could be a competing or a financial app, "shady" or "malicious" app can abuse this information in various ways to breach your privacy.

But it seems like Google has planned to address this serious privacy issue with the release of its next flagship mobile operating system.

With Android P, any app will no longer be able to detect when other apps on your Android device are connecting to the Internet, according to the new code changes in Android Open Source Project (AOSP) first noticed by XDA Developers.
"A new commit has appeared in the Android Open Source Project to 'start the process of locking down proc/net,' [which] contains a bunch of output from the kernel related to network activity," XDA Developers writes. 
"There's currently no restriction on apps accessing /proc/net, which means they can read from here (especially the TCP and UDP files) to parse your device's network activity. You can install a terminal app on your phone and enter cat /proc/net/udp to see for yourself."

However, the new changes applied to the SELinux rules of Android P will restrict apps from accessing some network information.
android-p-network-activity
The SELinux changes will enable only designated VPN apps to access some of the network information, while other Android apps seeking access to this information will be audited by the operating system.

However, it should be noted that the new SELinux changes are coming for apps using API level 28 running on Android P—which means that apps working with API levels prior to 28 continue to have access to the device' network activities until 2019.

A few custom ROMs for Android, such as CopperheadOS, have already implemented these changes years ago, offering better privacy to their users.

As XDA developers pointed out, this new change introduced to the Android operating system appears to be very small that users will hardly notice, "but the implications for user privacy will be massive."

Comments

Post a Comment

Popular posts from this blog

Kali Linux vs Ubuntu – Which Distro is Better for Hacking?

-
Image
Kali Linux vs Ubuntu – Which Distro is Better for Hacking? Kali Linux is the most popular penetration testing and hacking Linux distroibution and Ubuntu is the most popular Linux distribution. Since it is kind of common knowledge that Linux is a more convenient OS to use for hacking than Windows , the next question is a no-brainer; which Linux distro is the best to use for hacking ? But what is hacking anyway? And why does it matter which distribution is being used? Let’s get to it. What Does It Mean to Hack? Computer hacking is the act of using technical knowledge to overcome a problem. With that in mind, a hacker can refer to any skilled programmer but thanks to pop culture the hacker term is now synonymous with a security hacker – one who uses technical skills to create bugs to exploit security weaknesses in computer systems and break in. In a nutshell, the typical hacker is a security expert whose job is to break into computer systems using ingenious methods, e...
Read more

7 Ways To Free Up Hard Disk Space On Windows

-
Image
7 Ways To Free Up Hard Disk Space On Windows Hard drives are getting larger and larger, but somehow they always seem to fill up. This is even more true if you’re using a solid-state drive (SSD), which offers much less hard drive space than traditional mechanical hard drives. If you’re hurting for hard drive space, these tricks should help you free up space for important files and programs by removing the unimportant junk cluttering up your hard disk. Run Disk Cleanup Windows includes a built-in tool that deletes temporary files and other unimportant data. To access it, right-click one of your hard drives in the Computer window and select Properties. (Alternatively you can just search for Disk Cleanup in the Start Menu.) Click the Disk Cleanup button in the disk properties window. Select the types of files you want to delete and click OK. This includes temporary files, log files, files in your recycle bin, and other unimportant files. You can also ...
Read more

5 Basic Principles of Linux System Security

-
5 Basic Principles of Linux System Security It is still common that people do not know where to start when it comes to information security. With 5 basic principles we can improve the Linux system security and question ourselves if we have done enough. 1. Know your system(s) The first principle is about knowing what your system is supposed to do. What is its primary role, what software packages does it need and who needs access? By knowing the role of the system you can better defend it against known and unknown threats. Security Measures: Password policy Proper software patch management Configuration management Documentation 2. Least Amount of Privilege Each process running, or package installed, might become a target. Security professionals call this the “attack surface”. What you want is to minimize this attack surface by removing unneeded components, limit access and by default use a “deny unless” strategy. This latter means that access by default is blocked, u...
Read more