An Android Change for the Better (Maybe)

Chatty smartphones have been an issue for years.  Whether you're concerned with security or performance (or both), the amount of Probing being done by unconnected iPhones, Galaxies and the like has been worrisome.  

Today, things have changed.  Smartphones don't Probe as much.  This is probably for the better, but there could be a catch.

I'm an Apple guy.  Even when I was using PCs in college (things were different back in the 90's, I tell ya), it was always because they were free.  Once I finally had to buy a computer, I went straight to the very first iBook in 2001.  I own an iPod, iPad, iPhone and MacBook Air.  My next computing purchase will probably be an iMac (to better record those promised-but-not-yet-delivered online training videos on WiFi that I touted six months ago).  So, I like the company.  And I like bashing its competitors sometimes.  (Not my most magnanimous trait, but nobody's perfect.)

I liked pointing out that Google's Android operating system had worst wireless security than Apple's iOS.  Including:

-Apple requires server certificate validation by default for WPA2 Enterprise authentications (even if it is user-controlled), while Android does not.

-Apple smartphones and tablets Probe only for hidden SSIDs, like so:


(That's a Probe Request filter in WildPackets OmniPeek.  The SSIDs that you see in those Probe Requests are all hidden SSIDs, with the exception of "Google Starbucks".  Read on to learn why my local Starbucks' SSID is showing up in there.)

-Android smartphones and tablets Probe for all saved SSIDs.

At least, they used to.

I was demonstrating the inferiority of Android's wireless security recently when I learned something new.  They're not inferior anymore.  Some time recently (or, at least in between the time of my previous Android OS update and my recent update to Android 4.2.2) Google changed Android devices' wireless behavior to match that of Apple's.  Android smartphones and tablets started Probing for hidden SSIDs and staying quiet for broadcasting SSIDs, like so:


Of course, I was ambivalent.  GOOD that Android devices' wireless security has improved!  BAD that I can no longer tout Apple devices' wireless security superiority in comparison!

So, there you go.  A begrudging admission that Android's wireless security has been shorn up to match the level of Apple's.  (In fact, Android's wireless security is even considered superior in some circles because Android has an option to eliminate user-based verification of server certificates during WPA2 Enterprise authentication.  But we don't need to discuss that right now.)

But... (and, there's always a But)

...this may actually be bad for mobility.

Apple iOS and Android devices don't Probe unless they connect to a hidden SSID.  Nice.  But, let's take a step back.  Why is Probing in the IEEE 802.11 standard to begin with?

Probing (a process where a client/station device sends a Probe Request frame in order to elicit a Probe Response frame from an access point [AP]) is in the 802.11 standard to facilitate mobility.  Roaming.  Handoff.  Whatever you want to call it when someone moves out of the range of one AP and into the range of another.  Probing also helps devices connect more quickly when starting/waking up and can help devices find an AP in areas that are congested with neighboring WiFi devices and APs.

So, Probing can be a good thing.  Especially for mobile devices in crowded areas.  And now Android devices (like Apple iOS devices) do less of it.

If you say to yourself, "gosh, this iPhone/iPad/Galaxy/HTC One seems to really crap out when I go to a crowded place" (like the Starbucks by my place in Los Angeles), then you might want to ADD Probing to your device.  How?  By tricking your device into thinking that the SSID is hidden.

That's what I did at my local Starbucks.  My phone sends out these Probe Requests...


...because I manually added the "Google Starbucks" SSID to my phone.  Instead of tapping on "Google Starbucks", I tapped Settings -> Wi-Fi -> Other... (ellipse in the GUI, not added by me) once I got in line for a Tall Skinny Peppermint Mocha, Hold The Whipped Cream and then typed in "Google Starbucks".  I don't know if it helps a whole heck of a lot (Starbucks still uses the darned Captive Portal, which will slow down any wireless connection), but it does optimize a couple of things.

In summary, Android's move to Apple-like wireless behavior is good for security and overall channel performance.  But if your problems are mobility and speed of connectivity, then you might want to un-do what Android has done by adding your SSID manually.

***

If you like my blog, you can support it by shopping through my Amazon link or donating Bitcoin to 1N8m1o9phSkFXpa9VUrMVHx4LJWfratseU

ben at sniffwifi dot com

Twitter: @Ben_SniffWiFi

Comments

  1. Cool trick with pre-defined network - will test it on my Android devices :)

    Here's something you can still tout (I've done it for Android, you can try doing it for Apple, I'm pretty sure it can be done, but I'm over with Apple).
    https://arsenb.wordpress.com/2014/12/23/bypassing-android-security-via-backups-psk-recovery/

    My opinion, that in consumer-oriented OSes the weakest link in 90%+ of cases is the user, be it insecure backups, approving wonky certificates or plain ignorance (will write another blog entry on that - wonderful utility was released that unlocks your device as soon as it sees 'known' WLAN - you get the idea :) :) )

    ReplyDelete
  2. It's good to visit your blog again, it's been months for me. Well, this article that I have been waiting for so long. I will need this post to complete my college homework, and it has the exact same topic with your article. Thanks, have a good game.
    Business Analytics Course

    ReplyDelete
  3. Really impressed! Everything is a very open and very clear clarification of the issues. It contains true facts. Your website is very valuable. Thanks for sharing.
    Data Analytics Course in Bangalore

    ReplyDelete
  4. It took me a while to read all the reviews, but I really enjoyed the article. This has proven to be very helpful to me and I'm sure all the reviewers here! It's always nice to be able to not only be informed, but also have fun!
    Digital Marketing Course in Bangalore

    ReplyDelete
  5. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, will provide more information on these topics in future articles.


    Business Analytics Course

    ReplyDelete
  6. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Best Data Science Courses in Bangalore

    ReplyDelete
  7. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Data Analytics Course in Bangalore

    ReplyDelete
  8. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, will provide more information on these topics in future articles.

    Digital Marketing Course in Bangalore

    ReplyDelete
  9. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Business Analytics Course in Kolkata

    ReplyDelete
  10. Very good message. I came across your blog and wanted to tell you that I really enjoyed reading your articles.

    Data Science Training in Nashik

    ReplyDelete
  11. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Data Analytics Bangalore

    ReplyDelete
  12. Very informative message! There is so much information here that can help any business start a successful social media campaign!
    Data Science Training in Kolkata

    ReplyDelete
  13. This is really very nice post you shared, i like the post, thanks for sharing..
    full stack development course

    ReplyDelete
  14. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Data Analytics Course in Gorakhpur

    ReplyDelete
  15. Extraordinary blog went amazed with the content that they have developed in a very descriptive manner. This type of content surely ensures the participants to explore more themselves. Hope you deliver the same near the future as well. Gratitude to the blogger for the efforts.

    Data Science Training

    ReplyDelete
  16. Stupendous blog huge applause to the blogger and hoping you to come up with such an extraordinary content in future. Surely, this post will inspire many aspirants who are very keen in gaining the knowledge. Expecting many more contents with lot more curiosity further.

    Data Science Certification in Bhilai

    ReplyDelete
  17. Very informative message! There is so much information here that can help any business start a successful social media campaign!

    Data Analytics Course in Bangalore

    ReplyDelete
  18. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Best Data Science Courses in Bangalore

    ReplyDelete
  19. We are a group of concerned conservative citizens ready to take action to promote conservative values and work for a better America and with our supporters around the world. The name for our aggregate site, Tamil One India, was chosen as a declarative statement that reflects our motto 'The Truth be told. The word Right refers to correct and accurate. The word Wire refers to a news wire, and the word Report refers to an organized summary portal. The purpose of our brand is to correct the record when needed and provide content that, if not opinion, is sourced and factual.
    Tamiloneindia

    ReplyDelete
  20. Very informative message! There is so much information here that can help any business start a successful social media campaign!


    Data Analytics Bangalore

    ReplyDelete

Post a Comment

Popular posts from this blog

Go To Sleep, Go To Sleep, Go To Sleep Little iPhone

Five Facts About 6 GHz Wi-Fi

Chips, Glorious Wi-Fi 6E Chips!