search

SecUSo / privacy-friendly-netmonitor

Privacy Friendly App that shows active network connections of installed apps.
GNU General Public License v3.0
156 stars 33 forks source link

Doesn't show any output in Android 10 #74

Closed beerisgood closed 3 years ago

beerisgood commented 4 years ago

With Android 10 (and enabled Android internal DoH feature) i dont' see any output in the app. Reloading doesn't help.

Is this app still maintained?

sinus-x commented 4 years ago

This is most likely the same thing that happened to the PortAuthority project (bug here).

Android 10 restricts access to /proc/net (source), which means that apps cannot access device network state. I don't know anything else (e.g. if there is a workaround), as I'm not an Android developer in any way. However I am afraid that root access is the only option now.

HagenTronje commented 4 years ago

With Android 10 (and enabled Android internal DoH feature) i dont' see any output in the app. Reloading doesn't help.

I can confirm this. Since i updated my OnePlus7 to Android 10 (Oxygen OS 10.0.1 GM57BA) a few weeks ago the app does no longer show any network information. Re-Installation did not help.

Is this app still maintained?

I don't know. Google play store dates the last app-update to March 2018. So i guess the app is dead.

ilikenwf commented 4 years ago

It would conflict with VPN use, but could we get around needing root by creating a fake VPN to funnel all the traffic through, and then have Net Monitor inspect that instead?

szaimen commented 4 years ago

It would conflict with VPN use, but could we get around needing root by creating a fake VPN to funnel all the traffic through, and then have Net Monitor inspect that instead?

That would be really nice. e.g. Blokada is doing kind of the same thing.

beerisgood commented 4 years ago

Root wouldn't be good and is no nice solution. Root destroy whole system security and important Android security features

schillef commented 4 years ago

Root would be possible and was in an oder Version of the App as a proof of concept.

Implementation is not trivial though but frameworks for that may exist today. If there is interst in proceeding with the Projekt I could make the. Code availiable, but the detection core has to be refactored.

Cheers, Felix

Am 16. Dezember 2019 21:48:09 MEZ schrieb beerisgood notifications@github.com:

Root wouldn't be good and is no nice solution. Root destroy whole system security and important Android security features

-- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74#issuecomment-566236358

-- Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

beerisgood commented 4 years ago

@schillef So that means the project need development help or it wouldn't get support for Android 10+ ?

schillef commented 4 years ago

That depends if there will be a developer at the SECUSO institute in the next semester interested in updateing the App.

Sadly, I don't have time for developing Software anymore (Füll Time Job) and could only Support a dev myself.

Am 17. Dezember 2019 09:12:05 MEZ schrieb beerisgood notifications@github.com:

@schillef So that means the project need development help or it wouldn't get support for Android 10+ ?

-- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74#issuecomment-566431941

-- Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

ilikenwf commented 4 years ago

I wonder if a partnership with GrapheneOS (Daniel Micay) could be achieved? Previous iterations of the OS included this app.

On 12/18/19 3:36 PM, Felix Tsala Schiller wrote:

That depends if there will be a developer at the SECUSO institute in the next semester interested in updateing the App.

Sadly, I don't have time for developing Software anymore (Füll Time Job) and could only Support a dev myself.

Am 17. Dezember 2019 09:12:05 MEZ schrieb beerisgood notifications@github.com:

@schillef So that means the project need development help or it wouldn't get support for Android 10+ ?

-- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74#issuecomment-566431941

-- Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74?email_source=notifications&email_token=AADFIOVRXLI5XEXTWFROOLTQZKJVVA5CNFSM4JCPD4TKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHHSLHA#issuecomment-567223708, or unsubscribe https://github.com/notifications/unsubscribe-auth/AADFIORXVJGZRWIXYM4UCZDQZKJVVANCNFSM4JCPD4TA.

schillef commented 4 years ago

Net Monitor was included in Graphene/Copperhead? 🤔 I'm honored👌.

Now this raises my motivation.

The VPN core of the Prototyp App has to disassemble the IP packets handed to the VPN client, Open sockets to targets and reassemble im coming packets again.

This is way more difficult than a von Block where you just drop or Bypass connections. On the Plus side you get a packt capture on unrooted Devices and really See a lot of things (encryption, certificates,...) I don't know if the uid is still identifyable so app maching musst may be done with a different mechanism.

Any ideas?

Seems like I have to install Android Studio again...

Am 18. Dezember 2019 23:33:12 MEZ schrieb Matt Parnell notifications@github.com:

I wonder if a partnership with GrapheneOS (Daniel Micay) could be> achieved? Previous iterations of the OS included this app.>

On 12/18/19 3:36 PM, Felix Tsala Schiller wrote:> That depends if there will be a developer at the SECUSO institute in> the next semester interested in updateing the App.>

Sadly, I don't have time for developing Software anymore (Füll Time> Job) and could only Support a dev myself.>

Am 17. Dezember 2019 09:12:05 MEZ schrieb beerisgood> notifications@github.com:> @schillef> So that means the project need development help or it wouldn't get> support for Android 10+ ?>

--> You are receiving this because you were mentioned.> Reply to this email directly or view it on GitHub:>

https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74#issuecomment-566431941>

-- > Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.>

—> You are receiving this because you commented.> Reply to this email directly, view it on GitHub>

https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74?email_source=notifications&email_token=AADFIOVRXLI5XEXTWFROOLTQZKJVVA5CNFSM4JCPD4TKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHHSLHA#issuecomment-567223708,> or unsubscribe>

https://github.com/notifications/unsubscribe-auth/AADFIORXVJGZRWIXYM4UCZDQZKJVVANCNFSM4JCPD4TA.>

-- > You are receiving this because you were mentioned.> Reply to this email directly or view it on GitHub:> https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74#issuecomment-567242743

-- Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

ovz93br43v7 commented 4 years ago

I don't know if the uid is still identifyable so app maching musst may be done with a different mechanism. Any ideas? …

Afwall is still working with uid with Android 10.

schillef commented 4 years ago

Good to know. A block functuonality could be easily implemlemented as well...

Am 8. Januar 2020 13:59:55 MEZ schrieb ovz93br43v7 notifications@github.com:

Net Monitor was included in Graphene/Copperhead? thinking I'm honoredok_hand. Now this raises my motivation. The VPN core of the Prototyp App has to disassemble the IP packets handed to the VPN client, Open sockets to targets and reassemble im coming packets again. This is way more difficult than a von Block where you just drop or Bypass connections. On the Plus side you get a packt capture on unrooted Devices and really See a lot of things (encryption, certificates,...) I don't know if the uid is still identifyable so app maching musst may be done with a different mechanism. Any ideas? Seems like I have to install Android Studio again... Am 18. Dezember 2019 23:33:12 MEZ schrieb Matt Parnell notifications@github.com:> …> I wonder if a partnership with GrapheneOS (Daniel Micay) could be> achieved? Previous iterations of the OS included this app.> > On 12/18/19 3:36 PM, Felix Tsala Schiller wrote:> > That depends if there will be a developer at the SECUSO institute in> > the next semester interested in updateing the App.> >> > Sadly, I don't have time for developing Software anymore (Füll Time> > Job) and could only Support a dev myself.> >> > Am 17. Dezember 2019 09:12:05 MEZ schrieb beerisgood> @.>:> > @.> > >So that means the project need development help or it wouldn't get> > >support for Android 10+ ?> > >>

--> > >You are receiving this because you were mentioned.> > >Reply to this email directly or view it on GitHub:> > >#74 (comment)>

-- > > Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.> >> > —> > You are receiving this because you commented.> > Reply to this email directly, view it on GitHub> > <#74?email_source=notifications&email_token=AADFIOVRXLI5XEXTWFROOLTQZKJVVA5CNFSM4JCPD4TKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHHSLHA#issuecomment-567223708>,> or unsubscribe> > https://github.com/notifications/unsubscribe-auth/AADFIORXVJGZRWIXYM4UCZDQZKJVVANCNFSM4JCPD4TA.>

-- > You are receiving this because you were mentioned.> Reply to this email directly or view it on GitHub:> #74 (comment)> -- Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.>

Afwall is still working with uid with Android 10.>

-- > You are receiving this because you were mentioned.> Reply to this email directly or view it on GitHub:> https://github.com/SecUSo/privacy-friendly-netmonitor/issues/74#issuecomment-572036909

-- Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

beerisgood commented 4 years ago

Afwall need Root which isn't recommend cause of reduced system security

ghost commented 4 years ago

In this case what's the best (if possible floss) alternative to monitor outgoing connections?

Uj947nXmRqV2nRaWshKtHzTvckUUpD commented 3 years ago

You can use netguard

beerisgood commented 3 years ago

Looks like latest release stop support for Android >10 anyway: https://github.com/SecUSo/privacy-friendly-netmonitor/releases/tag/v2.1

So I close this issue and also Android 11 is available so new issues should target this version.

ignoramous commented 3 years ago

In this case what's the best (if possible floss) alternative to monitor outgoing connections?

Biased but: https://github.com/celzero/rethink-app

Btw, NetGuard is in maintenance-mode.

Uj947nXmRqV2nRaWshKtHzTvckUUpD commented 3 years ago

In this case what's the best (if possible floss) alternative to monitor outgoing connections?

Biased but: https://github.com/celzero/rethink-app

Btw, NetGuard is in maintenance-mode.

What do you mean by netguard is in maintenance mode?

ignoramous commented 3 years ago

NetGuard is being maintained and supported, but new features won't be added anymore.

https://forum.xda-developers.com/t/app-6-0-netguard-no-root-firewall.3233012/