Android smartphones are widely used as access points and routing nodes in wireless mesh and tethering networks that carry privacy-sensitive application traffic and host multi-hop communication apps such as Briar, Bridgefy, and similar frameworks.
In such settings, participants often have to trust that the gateway device runs uncompromised networking software, even though the Android platform permits extensive user customization through rooting and firmware modification.
Rooting can be beneficial for power users, but it also weakens assumptions about device integrity and may allow the bypassing of local, in-device integrity checks.
This paper surveys common rooting techniques on Android, outlines mitigation mechanisms and in-device detection approaches, and discusses their fundamental limitations for establishing trust in multi-hop wireless networks.
Building on these insights, we explore whether remotely observable behaviour of standard tethering services can provide supplementary integrity signals.
Using timing measurements of DNS responses in Android Wi-Fi hotspots, we report configuration-dependent differences including a clear separation between rooted and stock firmware on Samsung Galaxy devices.
We interpret these results as an exploratory feasibility study: DNS timing is a non-invasive side-channel contributing to integrity-risk assessment for Android tethering gateways as a supplementary decision helper.

Smartphone,Tethering,Integrity Check,Rooting