Bug 477033

Summary:	KDE connect for Android establishes connections to external servers with unclear purposes
Product:	[Applications] kdeconnect	Reporter:	mixed123 <mixed123>
Component:	android-application	Assignee:	Albert Vaca Cintora <albertvaka>
Status:	REPORTED ---
Severity:	normal	CC:	andrew.g.r.holmes, ilikefoss
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Android
OS:	Android 13.x
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description mixed123@proton.me 2023-11-15 09:09:10 UTC

SUMMARY
KDE connect for Android establishes connections to external servers with unclear purposes 



STEPS TO REPRODUCE
1. Run KDE connect for a day or so
2. Check Firewall which connections does KDE connect tries to establish


OBSERVED RESULT
KDE connect for Android tries to establish connections to pbs.twimg.com/443 , i.ytimg.com/443 , cloudfront.net and some external IPs.

EXPECTED RESULT
KDE connect for Android does not establish connection to any external servers


If such connections are deemed essential, which I am skeptical about, it must be explicitly outlined in the Privacy Agreement. Failing to do so may constitute a breach of GDPR and other privacy regulations.

Comment 1 John 2025-02-07 23:56:45 UTC

I completely agree!
And it's not only KDE Konnect that does this!
If you install OpenSnitch application firewall:
https://github.com/evilsocket/opensnitch
You'll see that it catches a lot of connections which in theory should not exist and doesn't seem to have a clear purpose.
Even Dolphin seems to trigger the firewall, without clicking on its "Network" section.

I think KDE should treat more carefully internet connections initiated.
Also, support for OpenSnitch application firewall would be very nice.