How is everyone dealing with Android 17's "Nearby Devices" change?
It took me a while to figure out why many of my self-hosted services were intermittently failing to connect on my phone after updating to Android 17. I eventually figured out there’s a new ACCESS_LOCAL_NETWORK permission which means the “Nearby devices” permission is now required to access devices on the same network subnet. For an avid self-hoster, this can be quite a bit.
I had my DNS configured so my public-facing server resolved to a local IP address when on my LAN. This meant that my web, immich, xmpp, NTP, jellyfin and DoH servers all resolved to a local IP address on wifi. On Android 17, it all broke without warning. No error messages. No asking for extra permissions. Just silent packet dropping.
I’ve solved it by configuring my public-facing services to resolve to my external (static) IP address, even when inside the network. I couldn’t make any internal services resolve to the external address (SMB, CUPS etc) because they are (obviously) not bound to my WAN interface.
I get why the change was made. A lot of apps were snooping around people’s networks to gather intel. A potentially massive privacy violation.
Has anyone else had this issue? Is this the cleanest solution?
Remote
0 Followers
0 Following
37 Posts
Joined July 02, 2023
Open post
Replying to
I don’t think anyone is gonna solve that problem until it’s actually a problem.
35
4
0
0
Open post
Replying to
I ran a packet capture on my TV as I left it turned off overnight.
They wake up in the middle of the night, do “stuff” then go back offline. Like a zombie.
56
7
0
0
Open post
Replying to
With RFK at the helm, I’d expect Polio at a minimum.
5
2
0
0
Open post
GrapheneOS and LineageOS don't ship with any Google services at all, so Google's policies shouldn't affect them.
35
0
0
0
Open post
Replying to
I have immich running on a server that’s under the stairs. It’s a bit loud, but it’s out of the way. I can only access it over SSH.
For backups, I wrote a shell script to do it. I just plug in my external drive, run the script, and unplug it again. The next day I’ll swap the drive for one that I keep in my workplace locker. There’s also a mirrored RAID for the server. That’s 4 copies in total.
Yeah, it’s still a bit of work. I couldn’t imagine teaching anyone else how to do it.
2
0
0
0
Open post
Motorola will probably want to ship a compliant* device in those regions.
"So be it" may mean you'll just buy the device with stock AOSP, and a warranty condition that allows flashing GrapheneOS. Hell, you'd slip a piece of paper in the box with flashing instructions.
24
2
0
0
Open post
Replying to
It's a GNU program, not a Linux program. It runs on multiple platforms.
15
3
0
0
Open post
Not the strongest name. Sounds kinda weak.
Maybe "Photographic Image Manipulation Program"?
10
0
0
0
Open post
Run a Win11 debloat script. It will remove a lot of privacy-invading windows components.
Apart from that, install a browser that isn't Chrome, and use an ad blocker.
Don't install any garbage that gives the Uni IT department any control over the device.
10
4
0
0
Open post
Replying to
It's the next 3D.
They try to expand in all dimensions. Bigger panels. Higher res. Higher bit depth. Increased contrast ratios. Stereoscopics. Higher refresh rates.
Yet to find a real world use for anything over a 65" QHD at 60Hz 8bpp.
18
8
0
0
Open post
I'm in my 40s, and have only ever dated within 1 month of my age.
7
0
0
0
Open post
Replying to
This is my preferred one. Just paste one command into a powershell console to run it.
https://github.com/Raphire/Win11Debloat
7
2
0
0
Open post
Replying to
Does notepad even have syntax highlighting?
They should make the web browser render.md. that would be far more useful.
6
2
0
0
Open post
I haven't heard the song "Cream" by Prince in over 30 years, but my brain DJ just started spinning it as I woke up. It's on loop. Tomorrow will be a different song.
2
0
0
0
Open post
Replying to
The fedora-wearing nerds are ones with 244Hz ultrawide 4k HDR monitors.
What you're describing is everyone who just wants to watch a TV show comfortably on their sofa. You could swap any TV for a base-model TCL the same size and they won't notice.
Even the gamers won't want 8K. You'd notice the drop on FPS more than the increase in quality.
2
1
0
0
Open post
Okta Verify works fine on mine, if that helps. The only permissions are network, notifications and sensors.
3
1
0
0
Open post
Host all the things!
Wordpress, SMTP/IMAP, tor, bittorrent, Nextcloud, Plex, NTP, photo galleries, DoT...
I even started hosting the website for my local Italian restaurant and they haven't even realised it yet.
18
13
0
0
Open post
A “per user” graph is not indiciative of the number of users, or any change in that metric. You cannot use this graph to determine any effect of the total user count.
1
0
0
0
Open post
Replying to
I think many of us have several GBs of JPEGs that have accumulated over the years. It would be nice to shrink them a bit.
However I wouldn’t do it until the majority of my software supports it. At least with JXL, you can transcode it back to legacy jpeg without losing quality
0
1
0
0
Open post
Replying to
Do Americans think each country has their own way of measuring things?
0
1
0
0
Open post
Replying to
It’s because people keep finding ways around them and they evolve in nonsensical ways.
0
0
0
0
Open post
Replying to
The big thing it was missing was a text search index, and I don’t see it in the feature list.
0
0
0
0
Open post
Replying to
Yeah, it’s been getting harder as time goes on. It’s basically only pixels that are supported and still on the shelf.
0
0
0
0
Open post
Replying to
I was frustrated by how buggy and unresponsive this was.
Tap for spoiler
Then at the end it told me that is froze on me 4 times for the lulz. 10/10 top troll.
0
0
0
0
Open post
Replying to
Nope. SSL certs are pinned to the hostname, not the IP address. I can change the IP address in DNS and it will still work.
0
1
0
0
Open post
Replying to
It won’t be a problem on a de-googled phone. Get it running LineageOS or GrapheneOS. Then install F-Droid (and probably Aurora store too). Some Google junk won’t work, but you’ll soon be more limited by having Google services on your phone than not having it.
0
1
0
0
Open post
Replying to
My favourite: It says you have an unread message. It won’t tell you where. You need to go hunting for it.
0
1
0
0
Open post
That sounds like a bit of a ride. I just selfhosted everything. There’s still things tied to my gmail, and probably always will be. However they’re not seeing the important stuff like medical, school, banking and services.
NGL; selfhosting is quite a commitment too. Especially for email. There are a lot of hoops to get trust as a server, and full text search took me years to get working right. Hosting a keepass database on a personal webserver is not as convenient, but there’s 100% control.
I inherently don’t trust any company that sells trust or privacy as a product. I’ll only fully trust open source software running on my own metal.
0
3
0
0
Open post
Replying to
If you walk through the Toyota manufacturing plant, all of the industrial machines are branded as Toyoda.
0
0
0
0
Open post
Replying to
The current messaging app doesn’t even have a search function. This is well overdue.
0
0
0
0