this post was submitted on 24 May 2024
96 points (72.9% liked)

Technology

59187 readers
2246 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
96
/e/OS Is Better Than Android. You Should Try It (www.wired.com)
submitted 5 months ago by [email protected] to c/[email protected]
109 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 5 months ago (4 children)

It's generally best to get a phone that receives software updates and security patches for more than 2-3 years. This is because vulnerabilities can be discovered in older hardware that cannot be fully fixed with a software update alone. While updating the OS helps with security at that level, flaws in the underlying hardware may still exist. Additionally, threats can come from various sources like malicious apps, texts, USB devices, or physical access, not just online attacks. Choosing a manufacturer that supports phones longer can help reduce these risks over the life of the device.

[–] [email protected] 1 points 5 months ago (3 children)

It's generally best to get a phone that receives software updates and security patches for more than 2-3 years.

See first paragraph again, not everybody is as affluent as you're, look at the problem from the other perspective

Additionally, threats can come from various sources like:

malicious apps,

will take control of the phone from the inside out, nothing will withstand that

texts,

Pegasus will use 0day, nothing to do about that

USB devices, or physical access,

Once somebody have physical access because you're some POI and not an average Joe, not much you can do

Choosing a manufacturer that supports phones longer can help reduce these risks over the life of the device.

See first paragraph, parenthesis content. Also phones are made with short lifespan on purpose, this gives steady inflow of money for the manufacturers, only few will give you what you want

[–] [email protected] 2 points 5 months ago (2 children)

See first paragraph again, not everybody is as affluent as you’re, look at the problem from the other perspective

There is no blanket advice for which device to use. You will have to look it up yourself. But if you're using a phone beyond its supported time, then you are vulnerable.

will take control of the phone from the inside out, nothing will withstand that

Nothing can withstand a 0-day attack, but it's on your manufacturer to prevent a 1460-day attack.

Pegasus will use 0day, nothing to do about that

See above statement.

Once somebody have physical access because you’re some POI and not an average Joe, not much you can do

You can be a random person walking in a busy metro area and happen to get in range of someone who is scanning for a particular device to use a side-channel attack on. You don't have to be a POI.

See first paragraph, parenthesis content. Also phones are made with short lifespan on purpose, this gives steady inflow of money for the manufacturers, only few will give you what you want

The manufacturers are still responsible for patching their devices. Once they stop doing that, you should know that device can't be trusted with your privacy and security. This is the minimum baseline standard. If you are trying to extend the life of a device by yourself, and use it as a daily driver, you have decided that your data is free for anyone to have.

[–] [email protected] 2 points 5 months ago (1 children)

You can be a random person walking in a busy metro area and happen to get in range of someone who is scanning for a particular device to use a side-channel attack on. You don’t have to be a POI.

I guess if you're broadcasting all the beacons your phone can be pawned even if you miss the last month OS update on your latest, greatest, shiny toy. This is just inevitable.

[–] [email protected] 0 points 5 months ago

You can always go the iPhone route and have Apple support your device for over six years. And you don't have to buy a phone for a very long time.