From: theom+news@chiark.greenend.org.uk   
      
   VanguardLH  wrote:   
   > In a new phone (Android 16), there is a setting:   
   >   
   >   Hotspot 2.0 (enabled)   
   >   Automatically connect to Hotspot 2.0 Wi-Fi networks.   
   >   
   > I don't think I want this as I wouldn't know anything about the   
   > operators of the hotspots.  I prefer to find what wi-fi networks are   
   > available when I visit someplace, and choose which one to use that I   
   > decide is probably trustworthy.  Seems I should disable this setting.   
      
   In theory, this is a more seamless and secure way to connect to access   
   points than either having them open (and thus unencrypted) or having a   
   publically-shared wifi password you might have to ask someone to obtain.   
      
   I've used Eduroam which is a similar idea and I've had it 'just work' and   
   give me connectivity while waiting for a tram in Zagreb, as it got a sniff   
   of signal from an Eduroam access point across the street.   
      
   If you're using TLS for everything there's a limit to what they can do.  If   
   you're using DoH (Android's 'private DNS' setting) then they can't see or   
   forge your DNS which takes out one way to profile you.  They can see the IPs   
   you connect to but there's not a lot they can get from that.  If you are   
   worried about profiling, connect using a VPN.   
      
   > I do want automatic connect to my wifi cable modem, but not to other   
   > networks that may be available wherever I happen to be.   
      
   I don't think this is as big a risk as you make it out to be.   
   I think more of a risk is auto-connecting to networks that are broken, and   
   stop your phone falling back to cellular.   
      
   Theo   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)