Comment by srcmap | Hacker News Reader

Comment by srcmap | Hacker News Reader

I like to see Android add System GUI to monitor:

* all apps (including daemon processes) that makes internet connections.

* Where they are connecting to.

* AND give user to GUI/Options block those connections.

I also want Android give users option to audit/monitor all new programs, .so, files that has been added to the systems and by which program, time.

If there are suspicious file that is added to the system, we can audit/monitor/report/google where it comes from.

In Windows 10, I use netstat to monitor all TCP connections and get the name of the programs and configure the windows firewall to only allow Windows Firewall/Firefox and Chrome to access internet and block IE/Edge/svchost/SearchUI and countless other SW from access internet. My system is so much faster and stable, after I did this.

Another one (at least for the 'monitor' portion) is Net Monitor (https://f-droid.org/packages/org.secuso.privacyfriendlynetmo...) which is available in F-Droid (https://f-droid.org/).

I'm not sure I see what security value these features would add for ordinary users.

On a modern device, most application processes will be making some sort of network connections, and many of those connections will be to IPs that can't easily be identified, even by an experienced user. (For instance, a lot of those addresses are likely to belong to Cloudflare or other CDN providers.) You can't rationally expect users to make intelligent decisions about whether to allow or block those connections.

IMO, it shouldn't be possible at all for applications to run code that's created/downloaded at runtime. iOS has the right approach here. This makes monitoring those files unnecessary -- the only path for code to enter the system is through installing or updating apps.

This can be done with apps already although you have to start them on reboot in my experience. Let me go fine the name. It is called NoRoot Firewall.

This is great, never knew of this before now. Thank you.

use "NoRoot firewall" to give access to some application :)

Xprivacy?/

Reply on news.ycombinator.com