4 ms·

> As part of a larger effort to move all network traffic away from cleartext (unencrypted HTTP) to TLS, we're also changing the defaults for Network Security Co

by mtgx 9y ago

> As part of a larger effort to move all network traffic away from cleartext (unencrypted HTTP) to TLS, we're also changing the defaults for Network Security Configuration to block all cleartext traffic. Finally! I know Apple originally promised this for iOS9, but I believe it eventually went back on its word? Is HTTPS mandatory for all iOS apps now? > We will also enable encryption of Android backups with a client-side secret. Did they just one-up iOS11 here? This one almost seems like a shot at Apple's recent security degradation for iOS. > In Android P we continue to refine Doze, App Standby, and Background Limits to further improve battery life; please be sure to try your apps with these and send feedback. How about you start showing me the apps that are actually draining my phone's battery, and stop allowing them to hide behind Android OS and System. Battery stats are virtually useless these days because they don't even tell you half the story.

sjwright 9y ago
> Is HTTPS mandatory for all iOS apps now? It is mandatory by default, but you can carve out exceptions. It appears Google has simply followed Apple's lead there. (Making it mandatory with no exceptions is impractical as some apps are designed to connect to servers not under the developer's control.) > Did they just one-up iOS11 here? No, just slowly catching up.
- mynameisvlad 9y ago
  > No, just slowly catching up. Are you sure about this? AFAIK, iOS will not do client-side encryption for iTunes backups (which is the equivalent to what's being talked about here) since iTunes still asks for a password to encrypt your backups. Although, I'm pretty sure it does for iCloud ones.
  - iknowstuff 9y ago
    Actually, iCloud backups are not end to end encrypted, which is a massive hole in Apple's privacy stance.
kllrnohj 9y ago
> How about you start showing me the apps that are actually draining my phone's battery, and stop allowing them to hide behind Android OS and System. Nobody is "allowed" to hide. It's simply an estimate based on a crude model. Power tracking is not an exact thing, it's guesses by the system on observed patterns with attempts to weight the blame for certain actions. One of those categories is also the "we have no idea where the power went, there's just this big gap between our estimate and what the battery says is left, so... put it there"
- Klathmon 9y ago
  To expand on this a bit, look at location services on a phone. A "fine" location access event is a "high power" event, it takes a lot of battery and should be done as infrequently as possible. Apps on android have the ability to say "i want to get location at least once every 30 minutes". A naive implementation would give every app that asks for this a timer, and when that timer ticks off, that app gets location information. For 5 apps, that could mean 5 times every 30 minutes! But android is a bit "smarter", it will do it once in the 30 minute period, then give that same info to all 5 apps. But then the question is, who caused that battery usage? None of them? All of them? Should adding a 6th app into the mix cause all of the battery usage of the other 5 to go down proportionally? Technically that 6th app is pretty much "free" in terms of actual power usage... What about if an app says "I want location whenever you get it, but I never want to trigger it on my own", where do you allocate it's usage? And that's just one API. Now imagine that with wakelocks, radio usage, accelerometer/gyroscope usage, etc...
  - kllrnohj 9y ago
    Or even CPUs & GPUs also power-gate chunks of their internal features. A CPU's power draw at a given voltage & frequency is not fixed. It depends on the actual instructions being executed. Taken to the extreme you end up with things like Intel's AVX512. So how do you calculate the app's CPU power draw? If they are using highly optimized SIMD power draw is going to be much higher than that of a CPU that's constantly stalled out waiting on dependent memory loads (aka, typical Java code)
izacus 9y ago
> How about you start showing me the apps that are actually draining my phone's battery, and stop allowing them to hide behind Android OS and System. Battery stats are virtually useless these days because they don't even tell you half the story. Android 8.0 introduced a notification that deliberately shows you when an app is draining battery in the background.

by mtgx 9y ago

sjwright 9y ago

> Is HTTPS mandatory for all iOS apps now? It is mandatory by default, but you can carve out exceptions. It appears Google has simply followed Apple's lead there. (Making it mandatory with no exceptions is impractical as some apps are designed to connect to servers not under the developer's control.) > Did they just one-up iOS11 here? No, just slowly catching up.

mynameisvlad 9y ago
> No, just slowly catching up. Are you sure about this? AFAIK, iOS will not do client-side encryption for iTunes backups (which is the equivalent to what's being talked about here) since iTunes still asks for a password to encrypt your backups. Although, I'm pretty sure it does for iCloud ones.
- iknowstuff 9y ago
  Actually, iCloud backups are not end to end encrypted, which is a massive hole in Apple's privacy stance.

kllrnohj 9y ago

> How about you start showing me the apps that are actually draining my phone's battery, and stop allowing them to hide behind Android OS and System. Nobody is "allowed" to hide. It's simply an estimate based on a crude model. Power tracking is not an exact thing, it's guesses by the system on observed patterns with attempts to weight the blame for certain actions. One of those categories is also the "we have no idea where the power went, there's just this big gap between our estimate and what the battery says is left, so... put it there"

Klathmon 9y ago
To expand on this a bit, look at location services on a phone. A "fine" location access event is a "high power" event, it takes a lot of battery and should be done as infrequently as possible. Apps on android have the ability to say "i want to get location at least once every 30 minutes". A naive implementation would give every app that asks for this a timer, and when that timer ticks off, that app gets location information. For 5 apps, that could mean 5 times every 30 minutes! But android is a bit "smarter", it will do it once in the 30 minute period, then give that same info to all 5 apps. But then the question is, who caused that battery usage? None of them? All of them? Should adding a 6th app into the mix cause all of the battery usage of the other 5 to go down proportionally? Technically that 6th app is pretty much "free" in terms of actual power usage... What about if an app says "I want location whenever you get it, but I never want to trigger it on my own", where do you allocate it's usage? And that's just one API. Now imagine that with wakelocks, radio usage, accelerometer/gyroscope usage, etc...
- kllrnohj 9y ago
  Or even CPUs & GPUs also power-gate chunks of their internal features. A CPU's power draw at a given voltage & frequency is not fixed. It depends on the actual instructions being executed. Taken to the extreme you end up with things like Intel's AVX512. So how do you calculate the app's CPU power draw? If they are using highly optimized SIMD power draw is going to be much higher than that of a CPU that's constantly stalled out waiting on dependent memory loads (aka, typical Java code)

izacus 9y ago

> How about you start showing me the apps that are actually draining my phone's battery, and stop allowing them to hide behind Android OS and System. Battery stats are virtually useless these days because they don't even tell you half the story. Android 8.0 introduced a notification that deliberately shows you when an app is draining battery in the background.