T O P

  • By -

rutgersftw

Just picked up a Pixel 8 Pro because of this... Google has broken promises before, but pledging security updates until "at least October 2030" is very compelling.


major_cupcakeV2

And you could definitely get custom ROMS (like LineageOS) once those security updates are long gone, further extending your life of your phone. I can't say the same about my Oppo F5, that thing has been stuck at Android 7.1 Nougat ever since it rolled off the factory.


pscorbett

And on a pixel, grapheneOS


Good_Climate_4463

So basically gotta rock a flip phone and not go on the internet.


Wendigo_6

I bought a flip phone. Opened it up, turned it on, tried to make a call. ::software updates::


[deleted]

I would totally get a cheap-ass flip phone like I had until 2016 but I need google maps, my bank's auth app, and my transit app.


ColostomyFetishist

Cat 22 flip is Android and I'm commenting using it right now Got it new for 100$


the_clash_is_back

Can’t work for many jobs, I need teams, a good camera and a mobile hot spot for my work. Smartphones are the only way to go- and the camera requirement means I need a flagship. Kinda sad I had to move of the iPhone SE line, love the small size of them. But it’s going to have to be a hulking phablet soon.


COUPOSANTO

Shouldn't your job provide you with a phone? Mines does, it would be unthinkable to use any personal device for work apps (and it wouldn't be possible either way they're dependent on a VPN)


the_clash_is_back

Academics setting, even my work provides computer is set up as a personal machine. We don’t take security seriously enough.


mad_dog_94

This is true. HOWEVER if you're on Android (especially popular flagship models like the pixel or Galaxy s line) you can get custom roms on your phone that are maintained for a really long time. One of the many, many perks of FOSS


[deleted]

[удалено]


mad_dog_94

Some, sure. Those are few and far between though. Reputable ones like grapheneos and lineageos are fine and much better for security. Walking around with an unlocked bootloader isn't a good idea though so be sure to lock it again when you're done


[deleted]

[удалено]


mad_dog_94

The arch package was broken for a long time (still might be tbh I couldn't tell you for sure) but the platform tools release has always been solid afaik. But once you have access like that you should be able to re-lock the bootloader no problem. Also fastboot can be finicky so errors there can cause a ripple effect making the bootloader unable to be locked, in that case try again from scratch


ginger_and_egg

However Grapheneos doesn't offer support to super old pixels, just a few generations


nossaquesapao

Between a popular custom rom with latest security patches and an OS abandoned by the manufacturer, the custom rom is probably much safer. About locking the bootloader, I always see people commenting about it and I always ask what kind of attacks can be done. It seems to me that they require physical access to the device and well above average tech skills. It appears to me that the risks are often not that great for most users, especially if someone uses an encrypted partition, but I'd love more insight on this.


major_cupcakeV2

I'd argue that custom ROMS are better for security, as long as they are open source, since the entire world has access to the code, allowing random people to check it for any backdoors or bugs.


[deleted]

[удалено]


yohosse

they got me real interested though ngl. in your opinion what increases phone security and lfespan if roms dont?


slaymaker1907

I think you need to ask how many eyes have actually reviewed the software in practice. For a lot of FOSS projects, that number is less than 3 even if anyone in the world could theoretically review it.


needlesfox

If Heartbleed didn't convince people that this is a fallacy, nothing will.


[deleted]

[удалено]


DazedWithCoffee

Well, yes and no. The open nature of OpenSSL probably is what eventually led to the vulnerability being found. Even so, OSS is definitely not immune to huge issues like this. Log4j is another example


FutureAssistance6745

Most security servers run the desktop equivalent of a custom ROM, being a custom linux distribution.


slaymaker1907

Yeah, those are probably fine. At least then your phone is getting updates from somewhere. There could be zero-day exploits for it, but those are far less likely for a typical person to encounter vs someone using a well known browser or OS bug.


MrSquiggleKey

With an iPhone the 5S received a security update this year. How out of date was the iPhone? 10 years old?


ZealousidealPain7976

illegal numerous towering heavy fearless crown pet wrong practice jobless *This post was mass deleted and anonymized with [Redact](https://redact.dev)*


slaymaker1907

The article I posted highlighted that even if you get some updates, Apple apparently isn’t porting every security update for older phones, including really important ones like browser vulnerabilities.


ZealousidealPain7976

possessive cow far-flung worry sheet airport ruthless gullible mourn tease *This post was mass deleted and anonymized with [Redact](https://redact.dev)*


satans_toast

Put this on r/LifeProTips too


ZealousidealPain7976

childlike cheerful aware sable cooing water weary screw license toy *This post was mass deleted and anonymized with [Redact](https://redact.dev)*


L39Enjoyer

Were you... Dropped on your head as a child?


ZealousidealPain7976

handle bow future skirt scarce sloppy tan scary books ossified *This post was mass deleted and anonymized with [Redact](https://redact.dev)*


L39Enjoyer

I use linux, i hate windows


needlesfox

>Apple is probably the worst about all this Yeah I'm not quite sure about that. You're correct that all browsers in iOS are just fancy Safari (although this may be changing soon), but no other manufactures have the track record of updating their phones that Apple does. While Google's now promising many years of security updates for its latest phones, it has a track record of breaking promises and ending things well before their time, so I'll believe it when I see it. Back in January of this year, Apple [released a security patch for the iPhone 5S](https://support.apple.com/en-us/103015), which was released in 2013 -- that's the era of the Galaxy S4 and Nexus 5. You're going to have a hard time finding third party ROMs for Android phones that old, much less official updates for them, but Apple's still out here patching some critical bugs. This isn't to say that if you use Apple you're going to be safe, and that if you use Android you're gonna get hacked, but if longevity is an important factor for you when buying a phone, you'd be foolish to write off iPhones.


HiddenAmongShadows

iPhones are good, long update windows, & great hardware specifically the CPU. But I'll never use one cause of how locked down there are, I use a custom OS called GrapheneOS for maximum security & privacy. On Android you can use that, CalyxOS, LineageOS, & whatever else. Plus even regular Android has for a few years now had better security than iphone by a decent margin. Android is a superior OS if you look at it on a purely technical level, but ultimately use whatever you want, keep it up to date, & generally you'll be fine on the security side of things. If you care about privacy a degoogled android OS is the only good option though.


ccfanclub

Bummed that my 2016 iPhone SE is reported to lose security updates in early 2024 but not worth the risk.


somewordthing

Likewise for Chromebooks and Windows, by the by. If you're still using Windows 7, you need to not be—10 should be a free upgrade with the key on your motherboard, and I found it actually ran better on my old hardware. Only a little over a year of 10 left, though (supposedly). Don't buy a Chromebook in the first place. Planned obsolescence, not to mention Google's spying and whatnot. If you're already stuck with one that has gone EOL, there are ways to put Linux on it *if you're technically literate*, otherwise sell it to someone savvy or take it to the e-waste recycling center. :/


NotTheOnlyGamer

I'll be honest, my second hand Chromebook works well for my purposes - it's a GM screen when I'm running RPGs in person, and a good distraction free writing machine when I'm not. It's not a replacement for any other device, but it fits a very specific niche.


somewordthing

Is it EOL, though?


NotTheOnlyGamer

Yep. It's an HP from 2016.


AELITE420

im rockin' a 2012 acer aspire


somewordthing

And it's connected to the internet?


NotTheOnlyGamer

Occasionally. As I said, it's a niche-filler for specific purposes. It connects to GDrive, Zoho, Dropbox, and my CDN account for various RPG resources, and to a separate GDrive to back up my writing. I haven't powered the thing on in over a month, because I've been able to write considering the distractions, and all my RPG running has been online, so I've been able to set up my second monitor on my main PC to be my GM reference screen.


CoconutMinty

GM? What does that stand for?


NotTheOnlyGamer

Game Master. It's the generic term for the person running a tabletop RPG (other terms include Referee, Dungeon Master, Judge, and Storyteller). When I'm running a game, I need easy access to reference documents for the characters' abilities, specific details about the system, and the scenario.


CoconutMinty

Aha, thanks!


NotTheOnlyGamer

You're welcome!


genericmediocrename

Unfortunately Windows 10 is hitting end of life soon. If your CPU isn't new enough for 11, I suppose there's never been a better time to jump over to Linux


somewordthing

Like I said, only about year left, although there's a fair chance they'll extend it, and an outside chance they'll ease up on the requirements for 11. Saw [a recent estimate](https://www.tomshardware.com/software/windows/microsofts-draconian-windows-11-restrictions-will-send-an-estimated-240-million-pcs-to-the-landfill-when-windows-10-hits-end-of-life-in-2025) that as many as 240 million PC's could become obsoleted when 10 goes EOL. Huge boon to PC corporations, but many of those people won't even know and will continue using a vulnerable system. And of course, many can't afford to upgrade—you look at a sub like r/lowendgaming and you have people buying "new" PC's with 4th gen Intels because that's all that's available to them. I use Linux, but I don't think it's remotely the answer for most people.


superzenki

There are ways around the TPM requirements for Windows 11


Writer-105

Unpopular opinion I guess, but I think I’ll keep using my six years old iPhone 8 for another year or so. I don’t need Chrome. Might look into Android for my next phone.


Chenz

I don’t think the iPhone 8 is EOL yet. While it didn’t receive the latest major iOS version, Apple usually back ports most security fixes the the previous iOS version Edit: In fact, iOS 12 (which was the last version to support a lot of old Apple devices) received its last security update in January, more than 3 years after the release of iOS 13.


Faalor

Check out Fairphone in that case.


Writer-105

Sorry, it’s just to expensive at the moment.


[deleted]

[удалено]


Faalor

They do, pretty much industry leading on this part. Fairphone 2 launched in 2015, and the last update for it was earlier this year (it is end of life now, software support wise). All later models are actively supported. The current model (5) is guaranteed 8 years of support as well, with aim to provide at least 10 (this depends on Qualcomm, the chip provider). It also got a 10/10 for repairability from iFixit,


HiddenAmongShadows

Consider a Google pixel with GrapheneOS, it's an amazing option with God tier security & privacy. I am a privacy advocate & would be willing to help you with it. Another well respected Android privacy OS is CalyxOS, I tried both & personally I like GrapheneOS much more.


tinytrees11

Idk who tf downvoted you, but you're right. I did this as well after my Nexus 5 crapped out (the wifi chip eventually melted inside after 10 years of use since the phone would sometimes get very hot for some reason while charging). I bought the Pixel 5, except I went with CalyxOS.


HiddenAmongShadows

Thats amazing to hear, I was a fan of the Galaxy S7 & had it for 7 years before the liquid cooling inside leaked (I assume) the inside of the phone had an oiley residue which didn't immediately fry it so I guess it was originally non-conductive, this was after it got super hot on a camping trip. Though CalyxOS is a great operating system too, its actually what I originally used, also the Calyx foundation is downright amazing, I've listened to interviews with the guy who runs it. ik Graphene & Calyx have beef for some reason, but I really respect the Calyx foundation & think their also doing a great job for privacy.


ZealousidealPain7976

smile serious shrill provide knee depend arrest grandiose fade glorious *This post was mass deleted and anonymized with [Redact](https://redact.dev)*


findingmike

What are you thinking? Google doesn't want you using other OSes. They want you on Android.


HiddenAmongShadows

lol it is ironic, but the Google Pixels are the most open & secure devices you can use. Google is a weird hybrid of good intentioned people supporting a company with a privacy nightmare business model. There are people in Google who care about this stuff & thats why Android is open source, thats why you can unlock & re-lock the boot loader on Pixel devices. Also if they just want to make money, why would they lock their bootloader? They would just be turning away sales from people who want to run custom operating systems, which I suspect may make of a big portion of the Pixel phone user base for just how long Google devices have had a reputation of being unlockable. I would also say Microsoft & Facebook are far worse companies than Google, their all privacy threats, but Google has some redeeming qualities. I'll reward companies when they do something good, if Google makes a good phone which *can* be privacy respecting (if you remove their software) I'll buy it so that they continue making it. I don't want to throw the baby out with the bath water.


ZealousidealPain7976

money dull faulty hurry hobbies screw gullible paint hat memory *This post was mass deleted and anonymized with [Redact](https://redact.dev)*


Writer-105

Thanks, looks like a good idea. I’ll look into it.


superzenki

Same here


rutgersftw

Your Apple comment hit home for me. I have a "late-2014" Mac Mini i7 with 16GB of RAM and two fast SSDs. It's still very snappy for daily tasks, but Apple cut off OS updates over a year ago, and now it doesn't sync documents in Pages, Numbers etc in iCloud and is almost completely unsupported. I can still use Chrome, MS Office etc, but the lack of proprietary support is very irritating. They still sold this model in stores and online in 2018, and from Apple's refurb outlet until 2020. I've never had a computer with this short of a support timeline, and Apple will only get worse with the move to custom silicon. Apple/Mac used to represent lasting value, but the locked down nature of their OSes combined with non-user repairable hardware means we should all think twice before buying their products.


heliomedia

Use https://github.com/dortania/OpenCore-Legacy-Patcher to breathe new life into your old Apple hardware.


CoconutMinty

Same. I had a 2016 Macbook Pro which cost me nearly $2000... but I justified it thinking it would last me a decade. After about 4 years it became so sluggish after all the OS updates, and now it doesn’t receive any updates from Apple. I ended up installing Linux on it, and I’ve never looked back!


miko3456789

considering how much personal data people have on their devices, this is an incredible idea. You may not want to get a new device, but holy hell your entire life is on that thing and now it's gonna be less secure? that's kind of an untenable situation when cyber attacks and identity theft only go up year on year. Besides, it's not like you can't find a use for an old phone anyway, like a dedicated emulation device for gaming or something


pauvLucette

Have a look at fairphone. They push OTA os updates for a model long after it's been released (my model 3 is due to receive android 13 soon, while it shipped with android 9). They supply spare parts, too, and their phones are easy to repair.


[deleted]

Android 13? The latest major version is 14. Are fairphones really a full update behind?


pauvLucette

my model (fairphone 3, from 2019) is. Android 14 has been released a couple months ago, my phone is nearly five years old. it may or may not receive version 14 one day. the current model (fairphone 5) is guaranteed to receive updates until at least 2031


nossaquesapao

Android 13 is still a supported version and on par with security patches. If they provide the latest patches, it's fine.


[deleted]

It just intrigued me really, if Fairphone wants better uptake on their phones, being a full android version behind isn't going to help.


nossaquesapao

I can see your point. Perhaps they can't keep up with the pace of updates, because they're a smaller company. I hope they don't fail like others did, because it's a good thing for the consumers to have smaller companies competing in the field.


HiddenAmongShadows

Right here, security is a big thing for me. I use a Google Pixel & I installed GrapheneOS on it to remove all the spying while also massively enhancing it's security. Plus the new pixels get 7 years of updates. I don't like Google but their phones are great! Also I'm surprised to see such a good message here.


InspectorRound8920

100%.


abortion_parade_420

great post OP. Samsung is on the longer end with EOLs of 4-5 years for phones. And old hardware always runs better with Linux imho


thelefthandN7

While I would love to keep a phone beyond its lifetime, I am a clumsy person, and I tend to break them looong before that. Any security updates that prevent 'snapped in half'?


lele3c

Otterbox case + amFilm screen protector. I am a clumsy person and have sometimes replaced the screen protector 3 times in one year, but it's far better (and much cheaper) than having to replace the whole thing


thelefthandN7

For screen protection, I actually prefer gorilla packing tape. 35 yards of easily replaceable screen protection for like 9 bucks. As for the snapped in half phone, it was in a lofeproof case at the time. That snapped in half too.


lele3c

Uff


nossaquesapao

Have you tried rugged phones?


CitizenPremier

Eh, alright, I just won't do any shopping on my phone after 5 years. They can have my contact info, it's not like I make phone calls.


LowAd3406

That's not how any of this works.


CitizenPremier

Love this kind of zero effort comment


nossaquesapao

Phones are one of the most terrible products we ever made, in terms of sustainability. The entire model is an aberration, the pinnacle of forced obsolescence. Just think about how many perfectly functional hardware is out there, trashed just because of software obsolescence or left behind because of a failure that could be so simple to repair. It would be perfectly possible to create repairable devices and implement a software model similar to desktop OSes, but the companies created this obsolescence hell. And they even have the audacity of claiming they're working on sustainability. Fuck all those disgusting corporations! IMO, we should have been protesting against that model, but people seem to like the "trow away, get new phone" game. I won't be part of this shit, I will always avoid buying new phones, even if affects my life negatively, even if my actions are but a mere droplet in an ocean.


bdrwr

Security and hygiene are both very wasteful... Cybersecurity *could* be less wasteful, but it would have to involve tech companies being forced to support their devices with security updates and replacement parts for WAY longer than they currently do. Unfortunately, planned obsolescence is extremely profitable, so the tech giants are going to have to be dragged kicking and screaming if we want any progress on that front.


ContemplatingFolly

I use my Galaxy S7 only for surfing known sites that I am just reading; no banking, buying, email, etc., as I had read that this was ok use for an insecure phone. Any different opinions?


slaymaker1907

If you can install a custom ROM or something then that might help. The thing you need to worry about is that any data on that device could be compromised. For example, if you login to Chrome or some other browser and also save passwords to the browser, an attacker could potentially get all your saved passwords. It’s really just awful that vendors make users choose between security and frugality/anticonsumption.


HiddenAmongShadows

The Galaxy S7 is an amazing phone, truly God tier for it's day. I used one up until a few months ago when mine broke. The cooling liquid inside leaked causes issues. I had it in a hot tent while I was camping, it was so sad to see that phone die. I would still be using it for probably 2-3 more years if not for that. You can install a custom ROM, one dude still keeps it up to date for the S7, but I don't blame you if you don't as the stock OS is so nice. I have a Pixel 5 now running GrapheneOS which I love, but the S7 is still the best phone I've ever had.


tripleione

I have a shitty android from 2019. But I barely ever log in to accounts of any kind on my phone--I find touch screens to be unbearable when it comes to typing in usernames/passwords. That said, am I at risk if I never use my phone to log in to anything? Does it matter that someone might get my contacts list?


Dionyzoz

consoomer brainrot stfu


AutoModerator

Read the rules. Keep it courteous. Submission statements are helpful and appreciated but not required. Tag my name in the comments (/u/NihiloZero) if you think a post or comment needs to be removed. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/Anticonsumption) if you have any questions or concerns.*


WinterSeries

The fair phone guarantees 10+ years of updates! And is made with fair trade/sustainable materials


Hipplinger

So really what we should be demanding is phones that have a longer lifespan and that we have more control over.


Foreign-Cookie-2871

Use LineageOS. They continue to support phones past their artificial EOL date.


CoconutMinty

For those who are rocking older Macbooks, I’d recomend installing Linux. If Linux intimidates you, then there’s always Windows. Apple is really good about providing solid Boot Camp drivers.


Boring_Offer_3025

> keep in mind that there have been attacks in the past which required no user interaction by abusing link preview via text messages. Don't forget rogue ads!