this post was submitted on 28 Jun 2024
61 points (93.0% liked)

Privacy

32103 readers
561 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Hi,

A friend wants to degoogle his phone, so I suggested the OS I'm currently using. The one we can't talk about... He wants a small/compact phone, so I suggested pixel 4a (not buying second hand though), but I'm afraid that planned obsolescence may kill the phone rather soon. What's your opinion?

Cheers and thank you for your help,

you are viewing a single comment's thread
view the rest of the comments
[–] delirious_owl@discuss.online -1 points 4 months ago (9 children)

So you're saying that, in order for me to steal everything on your phone, all I have to do is stand behind you in a supermarket and film you unlock your screen once. Then, on the way to your car, I quickly pull a knife on you and force you to tap your finger on your phone, then I hop on a motorbike and ride away.

Hope you didn't have any banking apps or crypto on your phone, because now that's gone.

QubesOS on a laptop is much much safer.

[–] zfr 2 points 4 months ago (6 children)

If you have GrapheneOS, I'm pretty sure you can randomize the numbers on the pin. You can also set a password instead of a pin and disable biometrics if you use stock Android. All the more difficult to obtain access.

For banking/crypto, I assume a wallet app would allow you to set an app password/pin.

[–] delirious_owl@discuss.online 0 points 4 months ago (5 children)

What does randomizing the numbers do? I just film you tapping them, and it doesn't provide any security.

[–] zfr 2 points 4 months ago (1 children)

I suppose you are correct there. Maybe try a privacy screen protector or use a password. It would be harder to catch each symbol with either of those.

[–] jet@hackertalks.com 1 points 4 months ago* (last edited 4 months ago) (1 children)

I think this person is just permanently a contrarian.

Randomizing the numbers does provide good security, because there's no longer an oil imprint on the most frequently used numbers on the phone, making guessing the pin code much harder before the TPM locks the phone.

Phones are full fledged computers nowadays, with Android you can have different profiles. For their level of paranoia, they could have a profile they never use in public, and only login with a full password, only when they're in a secure location.

For the randomized pin, and biometric two-factor use of a phone, that covers most use cases, and is quite secure compared to most models of data security average civilians use.

You can have different scopes, if you're in a crowded place, reading Lemmy isn't really a big security risk. But logging into your banking would be. All of that is possible on Android, the fact that they're so staunchly pro computer, is difficult for me to take their analysis seriously

[–] delirious_owl@discuss.online 2 points 4 months ago (1 children)

Things like gapps are closed source, have full permissions, and cannot be installed only on some profiles.

Qubes is safer and better compartmentalization.

[–] jet@hackertalks.com 1 points 4 months ago* (last edited 4 months ago) (1 children)

Things like gapps are closed source, have full permissions, and cannot be installed only on some profiles.

Except in stock AOSP or grapheneos.

Agree that qubes is the gold standard. But not to let perfect be the enemy of good, the vast majority of people, the vast majority of people, the VAST majority, are going to be unable to run qubes, either by technical ability, availability of appropriate hardware, or portability reasons.

Mobile phones for all of their faults, are the most secure piece of general computing hardware most people have in their lives

[–] delirious_owl@discuss.online 2 points 4 months ago

I might agree with you, with that stipulation. That is an important stipulation.

load more comments (3 replies)
load more comments (3 replies)
load more comments (5 replies)