FooBarrington
@FooBarrington@lemmy.world
- Comment on Does Shuzku / wireless debugging demand a trusted wifi device? 3 days ago:
it follows that a malicious wifi modem, knowing all devices’ mac addresses, could, perhaps, feign being the phone, mac-wise. And issue its own commands, which the phone wouldn’t tell aren’t its own.
I just tested some scenarios:
- I start Shizuku in one wifi network (prompt to trust the network, then I had to enter the pairing code since I hadn’t used it before)
- Then switch wifi networks
- Shizuku was immediately disconnected
- When I press “Start” again in Shizuku, I get prompted to trust the network
- Then I switch back
- Shizuku stays running
- Then I disabled Wifi
- Shizuku stays running
- Then I disabled mobile data
- Shizuku stays running
- Then I stop Shizuku & press “Start” again
- It asks me to enable wireless debugging, and that enables wifi
So you’re safe as long as you don’t start Shizuku & trust the network while connected to a potentially malicious network.
- Comment on Does Shuzku / wireless debugging demand a trusted wifi device? 3 days ago:
Ah, sorry, seems like I was wrong on the whole “no network connection needed”, but the reason is the explanation for your question!
The only way for your phone to recognize/authenticate the source of an incoming ADB connection is the MAC address. Basically every device that sends/receives ethernet packets has to have a unique “fingerprint”, so everyone knows it’s still the same device if it disconnects & reconnects etc. Everything else (IP address etc.) can change at any time, so the MAC address is the only fingerprint available.
But devices can spoof (change) their MAC address. That’s a really useful feature in many cases, e.g. phones these days use a random MAC for every new network, so a network provider can’t track you moving through multiple different networks. Also there’s no way to prevent it with our current network design. But this means that a malicious actor could wait for your trusted device to disconnect, then change their MAC to the one from your trusted device, and thus send malicious ADB commands.
Androids solution is to make you trust both the network and the device. So as long as you don’t have malicious actors in your trusted network, you’re safe - even if you connect to a different network with malicious actors, they can’t send ADB commands.
- Comment on How customer service jobs be 4 days ago:
The worse the pun, the better the food!
- Comment on Does Shuzku / wireless debugging demand a trusted wifi device? 4 days ago:
- You don’t need to be connected to a network to set Shizuku up. Even while you’re not connected to an external network (through Wifi or mobile data), your phone has a “loopback” network that allows applications on your phone to talk to other applications as if they were connected through an external network. So if you’re scared of giving access to the wrong thing, just turn off wifi & data.
- When Android asks you to approve an external debugging connection, it’s approved for the specific device that’s connecting. Other devices on the network are not allowed to connect. If I use my computer to connect wirelessly to ADB, only my computer can execute commands, not other devices on my network (they’d show another popup).
Hope this helps!
- Comment on Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama. 1 week ago:
Ah, that’s a bummer.
- Comment on Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama. 1 week ago:
I don’t know, can you? Do many TVs support VRR through HDMI <-> HDMI connections, but not DP <-> HDMI?
- Comment on Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama. 1 week ago:
I thought you can connect DP to HDMI with a simple cable, no adapters needed?
- Comment on behold, the I don't care cube 1 week ago:
Door-Kun!
- Comment on Perfect size for brats 2 weeks ago:
I see where the confusion is.
“Brat” can also refer to adults.
- Comment on Valve Addresses Steam Machine Anti-Cheat Concerns, Says It's Working Towards Support 2 weeks ago:
First, it’s not true that there’s no protection - various anti-cheat solutions do support Linux.
Second, “strong” solutions still let through cheaters, because client-side anti cheat is an inherently unwinnable cat-and-mouse game. It’s better for everyone to block kernel-level AC and instead force better backend solutions.
- Comment on Valve Addresses Steam Machine Anti-Cheat Concerns, Says It's Working Towards Support 2 weeks ago:
Not sure I understand - games with kernel-level anti cheat also still have cheaters.
- Comment on Valve Addresses Steam Machine Anti-Cheat Concerns, Says It's Working Towards Support 2 weeks ago:
Currently kernel-level anti cheat isn’t available for Linux, so games that are released with multiplayer support don’t require it (e.g. games that enable Linux support in EAC).
If kernel-level anti cheat is supported by Valve, many of those games will start requiring it. So if you don’t want kernel stuff, there’s a real chance this development will reduce the number of available games in the future.
- Comment on Gaming Pet Peeves 2 weeks ago:
Fixed save points in general.
To be fair, non-fixed savepoints introduce a bunch of additional work, especially on the gameplay design and testing sides, and for some games that work is better invested into other aspects of the game.
But if savepoints are fixed, they have to be frequent enough to not become an issue.
- Comment on Cities: Skylines upheaval: Developer and publisher announce “mutual” breakup 3 weeks ago:
Is there a single Paradox title that doesn’t do exactly this?
- Comment on Parkinson's sufferer wins six figure payout from GlaxoSmithKline over drug that turned him into a 'gay sex and gambling addict' 4 weeks ago:
Wow. Just… wow. A huge number of people all over the world struggle with addictions and go as far as committing suicide without ever seeking help due to the shame & prejudices associated with them, and your response is “those people are morons”.
Wow.
- Comment on Parkinson's sufferer wins six figure payout from GlaxoSmithKline over drug that turned him into a 'gay sex and gambling addict' 4 weeks ago:
How do you know it came on suddenly? The article says:
Within two years of beginning to take the drug the married father-of-two says he developed an uncontrollable passion for gay sex and gambling - at one point even selling his children’s toys to fund his addiction.
“Within two years” implies that it developed over this time frame. That’s anything but sudden, especially since it most likely started off with sporadic impulses and got more intense over time - how addictions usually go.
- Comment on Parkinson's sufferer wins six figure payout from GlaxoSmithKline over drug that turned him into a 'gay sex and gambling addict' 4 weeks ago:
Do you really think the average person would think “oh, surely there’s a straightforward medical explanation” instead of being ashamed & hiding the issue? Especially if they weren’t informed of this being a side effect of their medication?
- Comment on No Way 4 weeks ago:
Woodchipper
- Comment on Parkinson's sufferer wins six figure payout from GlaxoSmithKline over drug that turned him into a 'gay sex and gambling addict' 4 weeks ago:
And what tells you that?
- Comment on 🙋🏻♂️ Praise be to our Lord on high 🙋🏻♂️ 4 weeks ago:
I’m sure that would work, but giving weed to people who are still developing is not acceptable, even for religious purposes.
- Comment on Some hidden gem demos and games I've found on Steam (2025) 5 weeks ago:
It does in-universe, but out-of-universe it came later & is less recognizable than SCP.
- Comment on Some hidden gem demos and games I've found on Steam (2025) 5 weeks ago:
Interesting, I didn’t know that! Though honestly the perfect description.
- Comment on Some hidden gem demos and games I've found on Steam (2025) 5 weeks ago:
I get it for most of those, but SCP isn’t really an abbreviation.
- Comment on Global Warming [Photographic Evidence] 5 weeks ago:
that’s amaizing
- Comment on What are your favorite games from a worldbuilding standpoint? 5 weeks ago:
Not sure if it’s my absolute favorite, but Pathologic has fascinated me for years.
There are so many strange and unique aspects to the world (especially the Polyhedron, an impossible tower floating above the town) that already make for excellent world building, but when they come together it creates a feeling I haven’t felt from any other world.
You know how Lovecraftian horror has a very distinct feeling? The world of Pathologic makes me feel something vaguely similar, but completely unique - no horror or aliens, but the feeling of powers existing far beyond our understanding combined with people who somehow do understand small parts, and the consequences of their choices affecting everyone… it’s really hard to put into words, but it feels like it created its own genre.
- Comment on Just Dua Lipa 1 month ago:
Mamma mia!
- Comment on Manic Stew 1 month ago:
Narcissistic sandwich, is that you?!
- Comment on you have been defeated, you do not pass go, you do not collect your $200 2 months ago:
Don’t forget your anus paste!
- Comment on Which one and why? 2 months ago:
Do we know if it’s maidenless?
- Comment on ??? 2 months ago:
“Show me something adorable” is NOT an invitation to send a dick pic
