Why we need a safety lock against accidentally enabling WAN or location

other8026

BillHurdle yes. Each time my phone reconnects, it uses a different MAC address. I even "forgot" the network and reconnected again with the password and didn't mess with any settings. Each time it connects, new MAC address.

In the network settings, you can change what it's supposed to do for that network under "Privacy". For my home network, I use "Use per-network randomized MAC", but for public wifi I don't change that setting and use the default, which is "Use per-connection randomized MAC (default)".

By the way, I checked the MAC address from both my phone and from my home router's admin page. No MAC address was reused, as is expected.

BillHurdle

other8026 Thanks for actually testing this! I know I tested it myself some time ago and discovered that reconnects to the same SSID were using the same MAC, but perhaps that was on another of my Androids. And I definitely wasn't overriding per-connection with per-network.

de0u

BillHurdle As long as one disables autoreconnect, then preserving a list of previously used hidden SSIDs should be fine because then they won't be shouted out unless one actually taps on them, right?

I don't know whether the per-network "Auto-connect" toggle controls only connection, as the name suggests, or also scanning. When I go to the "Wi-Fi" screen it seems to show me a list of networks I am in range of, including random networks I've never used, so I can't have selected "Auto-connect" for them.

BillHurdle

de0u Being a total wifi ignoramus, I would imagine that scanning doesn't involve any transmission at all, since SSIDs seem to be pinged at a constant interval. That's why using public SSIDs is allegedly more private, ironically, than using hidden ones: you don't need to shout out to them as you're walking down the street. On the other hand, some phones might do so anyway, which would connect the user's current location with the routers hosting those SSIDs back at home.

I know from a trustworthy source that there are low-flying planes which siphon up SSIDs and connect them to GPS coordinates. (Gasp! How could they ever have thought of such a shady line of business!) But of course Google Maps was sued for essentially the same behavior. And then there are all the phones around you which have their locations enabled and know where your SSID is hosted. So public SSID is bad. And hidden SSID is bad. Take your pick. Maybe a hidden SSID with autoreconnect disabled is the least leaky.

karsenja

BillHurdle

I agree with this.

Right now if someone purchase a Pixel and they accidentally disable Airplane mode while using Graphene in a location that can be somewhat linked to them, there's a ping and now they have the IMEI of the phone. From then on, that's your phone. If you are a privacy aware person with rights in a nice country, it doesn't matter.

If you are a protestor in a country with an unethical government, it puts you in a dangerous spot. It is much too easy to disable this.

In a country with few safeguards against governmental abuse, an accident like that could lead to police demanding that phone, threatening you with violence unless you unlock it, and using the fingerprints on the phone as a basis for a person's torture or execution.

BillHurdle

karsenja Yeah it's that serious for some people. Imagine having a machine gun with a touchscreen toggle to "Begin continuous firing"! We really need a lock or red text or something. That one-in-a-thousand-day act of carelessness is simply too harmful.

[deleted]

BillHurdle if you are so afraid of accidentally enabling/disabling these toggles in the first place, I would suggest you removing/hiding these tiles and when there is a need to enable/disable them in the future, go the long way through the Settings. That way it will not be accidental. Hope this helps.

BillHurdle

[deleted] Yes, that was suggested by Murcielago above, and I did it, but thanks for trying to help anyway. The problem is that it's still too easy to accidentally hit the toggle next to "Airplane mode" in Settings, especially if one needs WAN access a few times a day. Give it enough days, and anyone is bound to tap the toggle by mistake. It's a loaded gun just sitting around the house.

nunyo

BillHurdle
Use a settings widget that takes you straight to network screen. The stock launcher does this without the need for any other apps

EmLeX932

Removing airplane mode from the quick action toggles is almost perfect. cus in settings you are more observant about what your hitting.

but seems you can still disable airplane mode accidentally turn off airplane mode from the WIFI toggle on the quick action bar. is there a way to remove that part of the toggle under where you pick the access point?

BillHurdle

EmLeX932 Believe it or not, I managed to disable airplane mode from the toggle inside Settings. It's just sitting there waiting for an accidental touch. And thank you for pointing out the other loaded shotgun, which is "Turn off airplane mode" inside the wifi button in the drawer.

nunyo

Long press settings icon, long press the wifi icon that appears and drag it to desktop.

Then use this app to set a password on the settings app
https://f-droid.org/packages/io.timelimit.android.open/

BillHurdle

nunyo Before I do something irreversibly stupid, are you saying that this would put a password on the entire Settings app? So every time I need to change any setting, I need to enter a password? That would definitely reduce the incidence of accidentally disabling airplane mode, but I would prefer to await some less intrusive mitigation from the devs. But thanks for letting us know about this option.

Minimal version would be printing the toggle text in red, or moving the toggle down to the very last option in the "Network & Internet" menu. The latter wouldn't interfere with people who don't care about this issue, as the drawer button is the usual way to disable airplane mode.

missing-root

Agree, and Googles stupid combined internet toggle (that doesnt keep wifi on reliably) doesnt help

nunyo

BillHurdle yes

« Previous Page