this post was submitted on 11 Jul 2023
468 points (92.4% liked)
Asklemmy
44152 readers
725 users here now
A loosely moderated place to ask open-ended questions
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- !lemmy411@lemmy.ca: a community for finding communities
~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If you are using an android phone, you can change the ROM to one that still gets updates, it's like changing the os in a computer. The process will delete all of the user data inside the phone but you've got nothing to lose if it doesn't get any security updates.
I recommend lineageOS to anyone wanting to go down this route because of its compatibility with every phone, old or new.
that “security update” quickly gets irrelevant as the exploits for lineage (or any non-standard rom) sells for pennies compared to a stock exploit. also no one’s paying security researchers to assess lineage - also it would be completely impossible with the amount of updates and devices they release
remember that (unfortunately) security is all about money
But more people using stock roms could potentially mean any exploit is more easily found compared to custom roms. Not saying that's the case, but it's a factor to consider.
as more people use a software it’s not easier to find exploits but much more profitable - and you see that propagate, as in:
Now the last 2 steps tend to cycle since the security of the product fluctuates
Now the above have nothing to do with “residual” products - such as custom roms. And actually, you have so many deeply specialized people around the main product that finding a bug and developing an exploit on the residual is just a matter of “who the fuck cares”.
So you’re basing your security of your phone on “care”, also known as security through obscurity (some times at least).
Another example of “who cares” security is libreoffice. When I started as a security engineer the veteran (and boss) referred to it as training material to find security bugs. I found some, but who cares? Ain’t nobody gonna pay for them as “nobody” uses the software (keep in mind that we’re referring to millions of daily users rather than thousands per month)
Sorry for sheet! ❤️ Be safe and use a password manager
How difficult is it to change ROM?
It depends. For Graphene OS, there is a web installer that the people who have used it said it was the easiest custom rom they've installed. Unfortunately, it only supports for Google Pixels.
For other custom roms... maybe not as easy...
Graphene OS Web Install: https://grapheneos.org/install/web
Yes that's true, but I've heard from others that the person involved has since stepped down from Graphene OS development, so it should be safe from now on.
hmmm depends on the phone and what you mean difficult. If you’ve managed to format a computer you’ll be fine. If you’re having trouble downloading chrome or office, maybe think about it again - I’m not saying you shouldn’t try or learn (everybody can learn), Im just saying that it will require an amount of time that I imagine would be uncomfortable to a user that don’t wanna bother downloading a program.
Not all people enjoy computers!
Hey there! Have you checked xda for unofficial ports or other ROMs? Might still be better than vanilla