ubuntu-phone team mailing list archive

[Sergio Schvezov <sergio.schvezov@xxxxxxxxxxxxx>]

On miércoles 20 de agosto de 2014 11h'35:15 ART, Martin Pitt wrote:
> Another question: If your goal is to lock down the device, why do we
> start adb by default? It would make much more sense to only enable
> that on demand -- when you use your phone, all you (should) need is
> MTP, an always running adbd allows you to circumvent the PIN
> restriction and access all your data anyway. It's thus still a
> security hole.

Disabling adb on default installs is one line of code removal away; I 
thought it would be less of a pain to wait for ogra to finish his work 
before doing that.

Additionally, adb won't start unless you setup some form of authentication, 
be it PIN or passphase (which is part of what ogra is working on too).