5 ms·
And yes this nonencrypted shit is totally insecure
by Distilitron 1y ago
And yes this nonencrypted shit is totally insecure
- guappa 1y agoWhile the never fixed 0days on android are completely secure. And let's not forget the several noclick attacks that can root your iphone with a message :)
- tholdem 1y agoHow can you compare iOS or Android security with desktop Linux security? Have you checked what it takes to achieve those 0-click root exploits on iOS or Android compared to a desktop Linux distro? Not even in the same league.
- guappa 1y agoHave you checked the time it takes apple or any android vendor to fix anything vs the time it takes a linux distribution? Months vs hours.
- akimbostrawman 1y agoSounds like a vendor issue also present on desktop. Just get a pixel and enjoy first class update support with GrapheneOS.
- yjftsjthsd-h 1y agoWhat makes you think it's not encrypted? https://wiki.postmarketos.org/wiki/Full_disk_encryption https://wiki.postmarketos.org/wiki/Full_disk_encryption seems to indicate that support varies a bit by device but it's perfectly doable.
- Arnavion 1y agoNote that the initramfs is stored without encryption or signing. So while your data won't be leaked when your phone gets stolen, it should be considered compromised if you get it back.
- yjftsjthsd-h 1y agoSure, lack of secure boot is a tradeoff. Of course, by the same token you can just reflash the boot partition and fix that.
- netsharc 1y agoHow does flashing work, who controls the writes? I remember reading about hacking the controller of an SD card to override the read/write functionality. I think if the bootloader is overwritable, it could lie to you about reflashing the boot partition...
- yjftsjthsd-h 1y agoIt varies by device. Obviously something has to handle writes, but generally it's a lower stage that isn't easily writable itself.