Thanks for addressing my concerns. EDIT: Those are all excellent points. Where there are tradeoffs, perhaps you could put some settings in your security slide

Thanks for addressing my concerns. EDIT: Those are all excellent points. Where there are tradeoffs, perhaps you could put some settings in your security slider UI. An optional software firewall that requires outgoing connections to be whitelisted would be great for my purposes, but everyone knows how painful those can be. Regarding connections, I've come across the following potential issues; I haven't looked into them but they give me the impression that locking down Android's network activity is too complex even for technical users, and that only a carefully secured OS will solve the problem (a big reason I've looked forward to Copperhead): * Some connections are made during bootup so an effective firewall somehow has to load early, or at least first in the network stack. * The address of the DNS server, Google's, is hard-coded in an in-kernel DNS resolver. Among other issues, it makes it hard to choose a different DNS server or to identify the application doing the lookup. * Some other kernel connection activity is hard to stop even with a firewall [1][2] > I don't want to make changes without a clear threat model in mind. Confidentiality is part of security, and exploits of confidentiality by businesses are almost certainly the most common security exploits. People tend to overlook them because usually they are technically legal and currently they are a sort of technological norm -- though remember that lead and asbestos were once norms. Certainly users should have the option; they should control their data. ---- [1] http://forum.xda-developers.com/showpost.php?s=12c116f17804f329273c5c7998426ca9&p=58356727&postcount=71 http://forum.xda-developers.com/showpost.php?s=12c116f17804f... [2] http://forum.xda-developers.com/showpost.php?s=a5c6cb3da0cb645fa53fe9f62194e8d7&p=58358439&postcount=72 http://forum.xda-developers.com/showpost.php?s=a5c6cb3da0cb6...