News for hackers. Stuff that matters.
Re:U.S. Navy bans TikTok from government-issued mobile devices by freedomben on Saturday December 21, 2019 @05:49PM (#21853777)
This is one of my favorite things about Android. It's trivial to restrict access using AFWall+ . You can block all access, mobile data access, WiFi access, it any combination thereof on a per app basis. Highly recommend it.
Re:U.S. Navy bans TikTok from government-issued mobile devices by rsanek on Saturday December 21, 2019 @06:21PM (#21853927)
Unfortunately requires root though, which means for the vast majority of Android users this is not an option.
Re:U.S. Navy bans TikTok from government-issued mobile devices by freedomben on Saturday December 21, 2019 @06:31PM (#21853965)
Yes very true. I've been rooting for years so don't usually think about that, but yes you have to be rooted. It's sad that for proper security you have to root your device. I'd love if they built that firewall into Android.

Anticipating a question, the best phones IMHO for rooting are the OnePlus phones and Pixel. Motorola had been good in the past but you have to get a code to unlock the bootloader (which I don't like).

Re:U.S. Navy bans TikTok from government-issued mobile devices by kevin_thibedeau on Saturday December 21, 2019 @08:37PM (#21854551)
NoRootFirewall is much the same. If you can install LineageOS it lets you revoke fine grained permissions without the app knowing.
Re:U.S. Navy bans TikTok from government-issued mobile devices by monoideism on Saturday December 21, 2019 @09:21PM (#21854726)
Plus, regardless of background or technical expertise, rooting your phone dramatically decreases security.

Downvoters: so what security features do you lose and gain when you root your phone? You've weighed the pros and cons, right?

Re:U.S. Navy bans TikTok from government-issued mobile devices by freedomben on Sunday December 22, 2019 @11:32AM (#21858060)
Not a down voter, but I disagree with you.

There's a fantastic example in my sibling post. Rooting gains you the ability to more tightly control network access. That alone is massive for privacy and security.

Obviously you have to run code with lots of permissions, which means you could be highly compromised by a malicious app. The onus on the user is much higher to vet apps. At the end of the day you have to place some trust, even if you don't root. It's a game of balancing tradeoffs.

It's overly simplistic to say that rooting dramatically decreases security regardless of background or technical expertise.

Re:U.S. Navy bans TikTok from government-issued mobile devices by monoideism on Sunday December 22, 2019 @10:55PM (#21861384)
Thanks for answering. I guess now that it's possible to install your own key to verify rooted images in many phones, the problem is somewhat attenuated. Losing verified boot is a major loss.

So yes, that was a bit overly simplistic. I rooted my phones for a number of years before carefully looking at the pros and cons and deciding it was a poor choice for a consumer mobile phone. Obviously, we need root access for our dev machines and servers. But I try to follow the principle of least privilege, and in that case, not clear why root would be needed for a mobile phone.

But I concede that for some use cases, it can be a trade-off.

What other security advantage of rooting can you name besides tighter control of network access? Also, note that there are a few apps that allow some degree of firewall with unrooted phones. I also suspect there's a lot of room for improvement there.