5 ms·
There is no way to work around this, short of rooting the phone to change the value of config_ethernet_iface_regex. Another reason why having root is important
by userbinator 1y ago
There is no way to work around this, short of rooting the phone to change the value of config_ethernet_iface_regex.
Another reason why having root is important on a device that you own.
- bigyabai 1y agoBeing able to arbitrarily redirect networking traffic is perhaps the single greatest reason to not have superuser privs in userland. I support anybody that wants to pressure OEMs into allowing bootloader unlocks, but I also can't name a use for root that justifies the insanely expanded surface area for attackers, at least on Android.
- userbinator 1y agoThe corporate FUD has gotten strong enough that people are getting scared of freedom. That should disturb you more than any perceived paranoia about "attackers".
- stavros 1y agoSeriously, people are acting like the "do you want to give this application elevated privileges" popup is some arcane magick that we as a race can never hope to possess.
- bigyabai 1y agoThat really should not surprise people when their smartphone has been telling them it is the wrong design pattern for over a decade. Point the finger at whoever you want. If you need to find who broke the bicycle for the mind, I think most of us know who's responsible.
- stavros 1y agoI'm not sure what you mean, I find smartphones' "do you want to allow this application access to X?" a pretty understandable and secure pattern.
- EvanAnderson 1y agoWhile I agree with you, without using a more granular permission paradigm I get more than a little antsy giving third-party software arbitrary access to even my standard user's privileges on Windows. I've been using a dedicated computer for banking / finance work for a few years now. I also run some software that I consider less trustworthy on my "daily driver" Windows PC as a dedicated user, separate from my "daily driver" account. I really need to make the jump to Qubes. I've been meaning to for years. The learning curve for their contrivances seems steep and I'm lazy.
- stavros 1y agoOh yeah, definitely, but mobile OSes do this fairly well. Windows just asks if you want to give access to everything or not, of course you're always going to click yes, especially if the program doesn't work without it.
- dwattttt 1y agoThere's plenty of actually granular permissions; they're just not used by anyone. How many people on Windows create separate user accounts, run programs as those accounts (hello runas), & set ACLs?
- ranger_danger 1y agoNot many, but I have found Sandboxie to be quite useful for this purpose.
- ClumsyPilot 1y agoIt’s not user friendly
- dwattttt 1y agoIt sure isn't. Although its competition is stuff like chmod (way less granular), and SELinux, and SELinux isn't winning any usability competitions either.
- ben0x539 1y agoFive minutes after this popup exists, you won't be able to run any of the big "can't participate in your social life without these" apps anymore without granting them those elevated privileges.
- lucasban 1y agoMost users have no interest in developing the skills to handle that level of freedom responsibly. I think it should be an option, but it is unfair to say this is only corporate FUD.
- lurking_swe 1y agoagreed. for the vast majority of consumers and employees this is like using a bazooka to kill a mosquito. Unnecessary and dangerous. But for some EXPERTS (IT/Tech professionals) and hobbyists, it’s crucial to their workflow. Having the _option_ is a must.
- sroussey 1y agoAgree, but how it is enabled is important. The same popup that asks for microphone access but now says the word root in its place, and a consumer is like “not sure what root is, maybe they meant toot!” And then their whole machine is compromised.
- lurking_swe 1y agooften times we’re lucky if a user reads those popups at all. :)
- spaqin 1y agoEver since I remember if you wanted root on Android, you had to go out your way by flashing SuperSU, then Magisk or KernelSU; most users don't ever use that. Even more so, with few recent solutions like KernelSU or some Magisk forks you have to go out of your way again to whitelist the app before it can even ask for root - mostly for avoiding detection, but that does act as an extra layer of security. I'm not too worried about security for normal users if we kept it that way. I just want not to have any extra roadblocks for the powerusers from the banks, Authy or McDonald's.
- ruszki 1y agoThe problem is that the bar needs to be moved higher and higher, to a level nowadays which would be annoying to most of us who know what they are doing. 20 years ago if I started to list ip addresses to my ISP on the phone I got somebody technical immediately. This doesn’t work anymore, because people know more about this. This caused that for example I could only turn WiFi on or off on my ISP’s router and nothing else without a specific request to them, a manual restart to my router days later, and I need to use a terrible buggy software. These kind of things unfortunately also restrict beginners, or people who without such barriers would start to tinker, and eventually learn to do these safely. Even I waited for weeks with the call, who have been configuring routers for 25 years. I’m installing now a self hosted OwnTracks on docker. A lot of beginner started to do the same. They make rookie mistakes all the time. Let them make those mistakes. I would have never learned what I know without the freedom of making mistakes.
- Zak 1y agoDo you believe the same thing about desktop PCs?
- bigyabai 1y agoYes? I don't use a single computer I own as root.
- Zak 1y agoFew people do; "don't use root as your primary login" has been standard advice for decades. Do you ever use sudo or equivalent?
- beeflet 1y agoI've used sudo before, but I find that it is really difficult to type with the safety gloves on because I keep fatfingering the password and locking myself out. My family recently got me a new computer setup that won't require sudo and other practices considered harmful. It even does shapes, colors, and animal sounds, which is good enough for my use case.
- zoky 1y agoOh wow, you got on the Windows 12 Preview somehow?
- Wowfunhappy 1y ago...you're clearly being sarcastic but I don't get the joke.
- EvanAnderson 1y agoI read it as commentary on PCs being turned into these types of things: https://www.amazon.com/Fisher-Price-Classic-Farmer-Says/dp/B00IVJK8Y0 https://www.amazon.com/Fisher-Price-Classic-Farmer-Says/dp/B...
- msgodel 1y agoDo you also live in a padded room because hardwood floors are potentially slippery and unsafe? Jesus Christ.
- greenavocado 1y agoGod forbid system developers allow for personal agency.
- bigyabai 1y agoSystem developers develop systems. If you want to enforce personal agency, go to the polls and vote for it.
- preisschild 1y ago"Rooting" removes a lot of Android security features, though. Instead of Apps only having the necessary permissions, apps can have ALL permissions with root and thus are a huge security vulnerability. https://www.reddit.com/r/GrapheneOS/comments/13264di/is_root_possible_with_grapheneos/ji54e19/ https://www.reddit.com/r/GrapheneOS/comments/13264di/is_root...
- ndriscoll 1y agoIf you give that app root, sure. That linked post is silly; your UI layer does not need root to grant privileges. e.g. `kdesu` asks for your password and hands it to `su`. The UI portion doesn't itself need setuid/root. A keyboard could of course keylog you. Don't install random keyboards.
- preisschild 1y agoI'm not an android dev, but the author of that reddit comment (Daniel Micay) is definitely an Android Security expert, so I trust his advice there.
- userbinator 1y agoHe is an "expert", also known as a "corporate mouthpiece".