• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

An app that prevents auto syncing for public wifis? (privacy issue)

G

geminihc

Lurker
we all do it often, connect to free public unsecured wifi. however, whenever you connect and if your auto-sync/background sync settings are on (most of us: yes), then you are automatically risking your private passwords compromised.

sometimes you just want to watch youtube videos or get news when connected to public wifi.

of course, yes we can manually go to disable auto sync before connecting to a public wifi but that is an unnecessary step if we have this app or function.

i was thinking only allowing certain assigned trusted wifis (home/work) to allow syncing, and none other.

what do you think?
 
Good point. Never even thought of that.

I just set up a Tasker profile to turn off auto-sync when connected to wifi that is NOT my home wifi.
 
Thanks for the thought. I have tried to set up a Tasker profile where Wifi Not Connected|>AutoSync off (with my home network SSID entered) and Exit task>AutoSync on. I tried to test this by manually disconnecting from my home Wifi but it keeps automatically reconnecting. I can test it when I next leave the house (although not sure I would know where to check whether it is Auto-syncing) but am curious to know why it is reconnecting automatically.
 
I set my profile up a little differently as I have a profile defined for when I'm connected to my home wifi.

Wifi connected - everything blank

Entry Task
Autosync on
Autosync off if %HOME doesn't match 1

Exit Task
Autosync On

(My home profile sets the variable %HOME to 1 when I'm connected to my home wifi.)
 
Hmmm .... haven't been brave enough to tackle variables yet :D

Edit: Discovered that i hadn't put an Exit Task in my Home>Wifi Connected profile and so it kept re-connecting. Put Wifi off as an Exit Task and now both Profiles work.
 
Variables are easy to setup, but a PITA to clear if you do something wrong.

Think of variables as a pointer.

Once you can get the hang of variables you can easily set if statements with them.

For example, when my 3.5 is plugged in (in my car I use an FM Transmitter, out and about I use my headset) -- When my 3.5 is plugged in *AND* NAVAPPS = 1, then that means I'm in my car, which means that I want the media volume maxed out to play out of my car speakers.

So my "volume" profile for my Jack is

Profile Name: 3.5mm Jack
Context:
Headset plugged (any)

Enter task:
(I have two media volumes set)
Media volume: 6 [for normal headset plugged in]
Media volume: 15 <If %NAVAPPS matches 1> [this means my FM Transmitter is plugged in]

I control a few other volumes with this profile, but primarily I use the "pointer" to set my if statement so that depending on whether my Navigation Apps are being used, the volume is the right volume. Saves me from creating multiple Jack profiles.

You do need to pay attention to the order. The "normal" one goes first and the "if" goes second.

Also, if you set a pointer, you need to make sure you create an exit task in the same profile to clear it. Else the pointer will be on all the time.
 
Really appreciate you taking the time to describe this. I decided to try out your profile even though I don't use my phone in the car to see if I could make it work. I did OK until I tried to enter the NAVAPPS bit as I couldn't workout where it went. Also, I didn't understand your reference to a pointer? Would be grateful for another "pointer" :D
 
Sorry. I didn't give you all the info in the profiles. Below is the (almost) exact copy from my phone :)

You need two profiles. And when I wrote pointer, I meant "variable".

Profile 1: Navigation Apps

Context <Apps> - Select all the apps that need GPS - Maps, Places, Navigation, etc.

Entry Task:
GPS - On
Variable Set - %NAVAPPS to 1
Wifi Off
Mobile Data On
Autobrightness - On
Display Timeout - [max out all the settings] and you will see * on all the timers...This means infinite

Exit Task:
Variable Clear %NAVAPPS
Display Timeout - 1 min [resets the display timeout to 1 minute from the "infinite" above]
[I didn't set GPS OFF as I didn't want GPS to turn off when Winamp loads in the 2nd profile below. I just turn GPS Off manually. I almost never forget.]
***********************
Profile 2: 3.5mm Jack

Context <State> : Headset Plugged (any)

Entry Task:
Variable Set %JACK to 1
DTMF Volume 7
Media Volume 5
Media Volume 15 <If %NAVAPPS matches 1>
Alarm Volume 3
Haptic Feedback On
In-Call Volume 4
Notification Volume 1
Ringer Volume 4
Silent Mode Off
Sound Effects Off
System Volume 4
Set Wallpaper
Load App WINAMP <Exclude From Recent Apps>
Wait 15 seconds [this is so I can press the button to start play if a song doesn't autoplay]
Go Home (to page where my Winamp widget is located)
Load Last App <If %NAVAPPS matches 1> [since I excluded Winamp above, if I had a Navapp on, this will load the Navapp that I started in profile 1 back on the screen. If a Navapp isn't active, then this would not activate and would stay on the page with my Winamp widget]

Exit Task:
Variable Clear %JACK
GPS Off [just decided this is a good place for it :)]
**********************
You could get fancy and sandwich the two if statements between If / End If statements. But I chose not to do that. Once you understand Variables and simple if statements, you'll figure out how to use the If/End If to sandwich multiple statements.
 
Don't get me wrong: I applaud your education efforts, but on the other hand, I believe most syncing tasks use SSL encrypted connections, so your data is *not* at risk when using public wifi.
 
geminihc said:
we all do it often, connect to free public unsecured wifi. however, whenever you connect and if your auto-sync/background sync settings are on (most of us: yes), then you are automatically risking your private passwords compromised.
Click to expand...

Does the bolded part mean that whenever we connect to a public WiFi and have our auto sync enabled, then anyone else who uses that WiFi connection can somehow get our private passwords? I'm not very tech savvy, so please correct me if I'm wrong, but I was under the impression it's impossible for people to gain access to your private information solely over a WiFi connection, and that they'd need your phone/laptop/computer (or whatever your information is stored on) as well to get this access. How can someone get this private information JUST because they're connected to the same WiFi as you?
 
thanks for the info about tasker, altho it doesnt seem more complicated than it needs to be...

about passwords being leaked, it is VERY possible. the only reason why this does not happen as often is because so much data goes through.

think about this: when you connect to the public wifi using your phone, and your phone USES that wifi to sync data, your phone does the following

-send encrypted password data -> PUBLIC wifi router -> goes to the internet -> whatever requested data goes back to router -> router sends data to your phone

now your "encrypted" password is now in a log on the router. it IS encrypted by normal standards.
 
Uh, no. Routers don't log all packets. There's not enough storage on the router for that. Be careful when running on assumptions based on FUD.

There's certainly some risk even in transmitting encrypted passwords. However, it's really a matter of determining what this risk is. In this particular case, it's minimal unless your passwords are being transmitted in the clear.

It certainly wouldn't hurt to implement what the OP is suggesting. Personally, I don't see it being worth the hassle. If you're worried about packets being intercepted then you need to cut all access to/from your device. Your packets still get transmitted when you're on trusted WiFi networks and your carrier's data network and they can still get intercepted at any point along the way.
 
@takeshi is correct.
There's a lot of misinformation in this thread. When autosyncing, your passwords are send encrypted. Even if they are intercepted in transit, they can't be decoded or reused.
 
You must log in or register to reply here.
Back
Top Bottom