3 ms·
Yeah I agree, these settings should be disabled by default and require explicit opt-in. That said, I am impressed by how privacy/security-conscious the OS seem
by amatecha 5y ago
Yeah I agree, these settings should be disabled by default and require explicit opt-in. That said, I am impressed by how privacy/security-conscious the OS seems to be otherwise!
- yc12340 5y agoYou can't really get rid of connectivity check, because it is a part of public API. Applications use it to check whether a network has internet access. Android itself uses it to detect captive portals and prompt user to authenticate when network requires authentication/payment via a web page.
- amatecha 5y agoI'm not suggesting they get rid of connectivity check. They already provide the option to disable it. All I'm suggesting is that it's not enabled until the user indicates they want it to be. This could be asked during a "first time" setup flow like most smartphones have.
- londons_explore 5y agoNot an awful lot of stuff breaks if you just patch the api to always return true.
- radlad 5y agoNetwork time is pretty important for things like HMACs.
- amatecha 5y agoMaybe, but couldn't they let me set my own server and not hit a predefined time server without asking me?