You say security, I say memory leak fixer
Use “free” Google services so that any pseudo-governmental entity can get full access to your mails, backups, photos, contacts, location … but worry about stuff in device memory. Yes. A sane approach.
Google is one of the most security focused companies believe it or not.
If you chose to trust them. Here’s a dum-dum, kid. Enjoy your mama’s cookies.
Security and privacy are not the same thing. For that matter, neither is anonymity.
Not like I give a shit about which between importance when I have to take some jackass I don’t know’s word about what one of those, as if it makes a difference, important software is doing on “my” computer.
Fuck that. I know better. It’s not my computer. And you think I’m gonna buy some gorram nonsense about the difference between which is which of those trinaries.
You’re not listening. You’re running your mouth about some shit that is completely irrelevant to the point in hand.
I’l trust Google about as soon as I’ll trust that other pedophile nerd who never really wrote anything himself and just stole, swindled, underpaid suckers, etc.
Yeah, okay. It’s okay though. This time, you can preach to me about more shit I already know that has absolutely zero philosophical value and expect me to not be snippy again in return to your condescending narcissism.
CalyxOS has this too. Choose between 1 and 72 hours.
Ive got mine set to 8, so it usually does it while I’m asleeo
Yeah, I have mine set to 12 to be a little less tight. Not so short that it reboots on a regular basis, but I think 12 hours would be pretty short for a thief to get my phone to a cracker in time. (assuming they even have access to tools to crack modern calyxos) I always power off my phone off going through customs.
Sadly, it seems todays law allows them to force you to unlock it, otherwise they straight up treat you as a terrorist. At least in UK it seems (source: Britannica youtuber getting detained when returning home to UK)
This sounds less like security
And more like a backdoor
Google can already push apps to your phone at will via their remote installation service. How does this create or open a backdoor?
GrapheneOS has had this feature. Unlocking after a reboot is only possible with PIN. Also the RAM is wiped. This increases security and lowers the risk of attackers gaining access. Be it physically or not.
Leaving your keys in memory is the weakness that could potentially let authorities into your phone. This could harm people. If your phone has rebooted, and you haven’t logged in yet, there are no keys in memory. That means your data is encrypted at rest.
For the sake of comparison, this was also implemented in iOS 18.
Thanks for the voice of sanity. There are so many people freaked out by basic security measures that it boggles the mind.
The before first unlocked state is considered more secure, file/disk encryption keys are in a hardware security module and services aren’t running so there is less surface for an attack . When a phone is taken for evidence, it gets plugged into power and goes in a faraday bag. This keeps the phone in an after first unlock state where the encryption keys are in memory and more services that can be attacked are running to gain access.
It’s more like security theater if the phone doesn’t have the latest OS and doesn’t have the necessary hardware to block cellbrite in the BFU state
