As usual if you’re looking to have any security (Verified boot) GrapheneOS + Pixel phone is the only options. I really don’t get it how come people in places like this are okay with having a phone with all their personal data and logins without verified boot. Stolen / lost phone and game over.
Getting a Pixel just to have Graphene is not always an option. At least not a sensible one that factors in everything that’s important when buying something.
My current phone still runs perfectly fine, so getting a new one feels like a massive waste, too.
That means shit, if someone can compromise your bootloader in an hotel or some other public place then they’ll get to your data either way once you turn on the phone. This is one very small and very important detail that all those tech youtubers pro-privacy, security and whatnot love to ignore as it is the really hard one that makes all the difference.
Secure boot is a complex subject and it requires a lot of work and checks to make sure nobody tempered with your device and Graphene / Pixel are the ones that really give a shit about that (except for Apple that wants to block jailbreaking and pirated Chinese app stores at all costs).
That means shit, if someone can compromise your bootloader in an hotel or some other public place then they’ll get to your data either way once you turn on the phone.
I never really understood how this kind of attack happens. Can it simply be done in any phone? What are the required conditions?
Ah I see, does that mean that in terms of security, switching to another ROM on a phone with non re-lockable bootloader is a downgrade from the stock ROM?
switching to another ROM on a phone with non re-lockable bootloader is a downgrade from the stock ROM?
It depends on your goal. If you plan to have any kind of boot / data security and the device can’t be re-locked with an alternative ROM you’re essentially better with the stock ROM in a locked state.
Now that’s kind of personal choice, I believe the instant damage done by someone stealing your phone and getting your data (because your bootloader was unlocked) is considerably larger than the privacy implications of running the stock / vendor Android. For what’s worth if you can root your stock Android and firewall everything that seems suspicious it might be better than running an alternative ROM without a secure boot. Even with an alternative ROM you can run into privacy issues, take for example here CalyxOS running on Qualcomm CPUs. What’s interesting here is that this issue doesn’t happen in Graphene because they’re actually better at covering all grounds than CalyxOS and others seem to be.
Don’t you think it’s easier, due to inattention when installing a compromised app, a privilege escalation attack through root or actually an invasion due to the amount of bloatware from companies that take their piece of the pie in the Stock ROM (even though they do would cleaning via ADB) and even worse rooted to block these suspicious traffic be something more harmful for the user?
Because the ability to steal the decryption password in RAM memory due to the unlocked bootloader is a little less likely for the thief to have.
I use LineageOS and I feel much better, since my cell phone is Xiaomi, than using MIUI, which is from a chinese big tech company and has proprietary code.
The attack you’re describing is a typical automated thing where hackers are exploiting dozens of devices in some automated fashion, that can happen but the damage is different. They might get your data but that’s usually sold on the black market in a bundle of compromised data. It will take some time for the info to get sold and for the buyer to act on it and sometimes it may never act - after all you’re one compromised device among millions. Even if the buyer it’s more likely he’ll simply use your device in a botnet to fake clicks on ads or DDoS something and profit that way. The key aspect of those attacks is that you’ve time to flag suspicious activity and act.
However if you carry an unlocked phone and someone steals that from you there’s a very high chance that it isn’t a random burglary, according to statistics most burglaries are committed by someone who knows victim aka is targeting you specifically. If you’re targeted by someone or some entity they’ll want your data and accounts and they’ll have the time, resources and attention focuses towards you giving you little to no time to react. This is why I would NEVER use a phone without a secure bootloader.
Tell you what: I agree with you on this. If one is truly paranoid and takes physical security into account, a rooted stock OS is a far better option in terms of restricting access to system files (not saying the CIA/MOSSAD can’t do it, but your random reddit-informed script kiddie definitely can’t). Indeed, rooting your stock OS, firewalling everything and deleting telemetry might be a decent idea (there are ways to install security patches on rooted mobiles, not to worry).
Edit: on the matter of CalyxOS, I wouldn’t go as far as to fault them on it. Grapehene has taken a resolution to either block/use their own almanac servers. This requires a fair bit of work. Oh, and what domain do Google chips use for almanacs anyway?
Edit: on the matter of CalyxOS, I wouldn’t go as far as to fault them on it. Grapehene has taken a resolution to either block/use their own almanac servers. This requires a fair bit of work.
Yes, but if you want sell a secure OS to people it should be really secure and not have big blind spots hidden from the users like this one.
Brazilian here, used to people being robbed all the time:
Almost 100% of the time, robbers just want quick cash, ant they will either 1: steal the phone and try to sell it (most robberies simply fall into this first category) or 2: point you a gun and force you to unlock the phone in order to 2a: force you to transfer money from all your banking apps or 2b: take it unlocked in order to send messages to your contacts asking for money.
Most robbers don’t have enough tech skills to even understand what a bootloader is. We live in techy social circles and we tend to think everyone has similar skills, while in reality, most people can barely use their devices. Just to illustrate how low are most people skills, if you format a drive with something like ext4, most of the population will be unable to access it.
The kind of situations where criminals will have high skills tend to be when they target specific people or companies, usually paid by crime lords or rivals. Such scenario is very unlikely to happen to the average joe.
Don’t get me wrong here, I’m not saying that security measures are unnecessary. I’m just telling how most criminals operate around here, and highlighting how we tend to overestimate people’s tech skills.
I’ve been using a Pixel 6a with GrapheneOS and the battery life is just fantastic. Sometimes I can go for a whole week without charging, but this is the exception. But under normal circumstances, I still get like 3 days of battery life. You don’t need to be worried about that at all, battery life is even improved on GrapheneOS compared to the Stock ROM.
Dang a whole weeks seems like you’d have to not use it at all.
I have an s10e currently (been using it for over 4 years now) and the battery is shot. I’m at like 30% by noon. I use a lot of Bluetooth throughout the day at work. Basically 10 hrs of Bluetooth a day.
I just never see pixels on the top battery life for phones round up and that make me nervous.
I want something that will be at 30%ish when I go to bed.
On average I get like an hour and a half of screen time per day. I use my phone to message people on Signal, I connect it to my bluetooth earbuds and listen to music or a podcast when I go for a run and I occasionally like to take photos. I don’t waste my time scrolling through TikTok for 8 hours like many other people unfortunately do. One week of battery life is pretty rare, but it has happened before. As I said, usually I get 2-3 days out of it when I it charge up to 80%. (charging up to 100% is bad for battery health, so I try to avoid it). I’m sure you will be fine. You can get a Pixel, install Graphene, try it out and give it back and receive a refund if you don’t like it. That’s the good thing about Pixels, installing a custom OS doesn’t void the warranty or anything like that. You can just revert back to the stock OS and everything will be fine.
As usual if you’re looking to have any security (Verified boot) GrapheneOS + Pixel phone is the only options. I really don’t get it how come people in places like this are okay with having a phone with all their personal data and logins without verified boot. Stolen / lost phone and game over.
Getting a Pixel just to have Graphene is not always an option. At least not a sensible one that factors in everything that’s important when buying something.
My current phone still runs perfectly fine, so getting a new one feels like a massive waste, too.
And and what happens to your data if your phone gets stolen?
Doesn’t Android have file based encryption by default since a while now?
That means shit, if someone can compromise your bootloader in an hotel or some other public place then they’ll get to your data either way once you turn on the phone. This is one very small and very important detail that all those tech youtubers pro-privacy, security and whatnot love to ignore as it is the really hard one that makes all the difference.
Secure boot is a complex subject and it requires a lot of work and checks to make sure nobody tempered with your device and Graphene / Pixel are the ones that really give a shit about that (except for Apple that wants to block jailbreaking and pirated Chinese app stores at all costs).
I never really understood how this kind of attack happens. Can it simply be done in any phone? What are the required conditions?
This is the classic “evil maid attack” applied to phones instead of laptops.
Removed by mod
Didn’t they get some grant from twitter or something like that? Cuz calyxos did get a million dollar grant last year from that jak dorsie guy.
Ah I see, does that mean that in terms of security, switching to another ROM on a phone with non re-lockable bootloader is a downgrade from the stock ROM?
It depends on your goal. If you plan to have any kind of boot / data security and the device can’t be re-locked with an alternative ROM you’re essentially better with the stock ROM in a locked state.
Now that’s kind of personal choice, I believe the instant damage done by someone stealing your phone and getting your data (because your bootloader was unlocked) is considerably larger than the privacy implications of running the stock / vendor Android. For what’s worth if you can root your stock Android and firewall everything that seems suspicious it might be better than running an alternative ROM without a secure boot. Even with an alternative ROM you can run into privacy issues, take for example here CalyxOS running on Qualcomm CPUs. What’s interesting here is that this issue doesn’t happen in Graphene because they’re actually better at covering all grounds than CalyxOS and others seem to be.
Don’t you think it’s easier, due to inattention when installing a compromised app, a privilege escalation attack through root or actually an invasion due to the amount of bloatware from companies that take their piece of the pie in the Stock ROM (even though they do would cleaning via ADB) and even worse rooted to block these suspicious traffic be something more harmful for the user?
Because the ability to steal the decryption password in RAM memory due to the unlocked bootloader is a little less likely for the thief to have.
I use LineageOS and I feel much better, since my cell phone is Xiaomi, than using MIUI, which is from a chinese big tech company and has proprietary code.
The attack you’re describing is a typical automated thing where hackers are exploiting dozens of devices in some automated fashion, that can happen but the damage is different. They might get your data but that’s usually sold on the black market in a bundle of compromised data. It will take some time for the info to get sold and for the buyer to act on it and sometimes it may never act - after all you’re one compromised device among millions. Even if the buyer it’s more likely he’ll simply use your device in a botnet to fake clicks on ads or DDoS something and profit that way. The key aspect of those attacks is that you’ve time to flag suspicious activity and act.
However if you carry an unlocked phone and someone steals that from you there’s a very high chance that it isn’t a random burglary, according to statistics most burglaries are committed by someone who knows victim aka is targeting you specifically. If you’re targeted by someone or some entity they’ll want your data and accounts and they’ll have the time, resources and attention focuses towards you giving you little to no time to react. This is why I would NEVER use a phone without a secure bootloader.
Tell you what: I agree with you on this. If one is truly paranoid and takes physical security into account, a rooted stock OS is a far better option in terms of restricting access to system files (not saying the CIA/MOSSAD can’t do it, but your random reddit-informed script kiddie definitely can’t). Indeed, rooting your stock OS, firewalling everything and deleting telemetry might be a decent idea (there are ways to install security patches on rooted mobiles, not to worry).
Edit: on the matter of CalyxOS, I wouldn’t go as far as to fault them on it. Grapehene has taken a resolution to either block/use their own almanac servers. This requires a fair bit of work. Oh, and what domain do Google chips use for almanacs anyway?
Yes, but if you want sell a secure OS to people it should be really secure and not have big blind spots hidden from the users like this one.
Thanks for the info! I agree, without being able to outright change phone, you can only choose your tradeoffs
Exactly.
I’ll be sad about that, but neither can I afford a new phone, nor would it be sustainable to buy one
Brazilian here, used to people being robbed all the time:
Almost 100% of the time, robbers just want quick cash, ant they will either 1: steal the phone and try to sell it (most robberies simply fall into this first category) or 2: point you a gun and force you to unlock the phone in order to 2a: force you to transfer money from all your banking apps or 2b: take it unlocked in order to send messages to your contacts asking for money.
Most robbers don’t have enough tech skills to even understand what a bootloader is. We live in techy social circles and we tend to think everyone has similar skills, while in reality, most people can barely use their devices. Just to illustrate how low are most people skills, if you format a drive with something like ext4, most of the population will be unable to access it.
The kind of situations where criminals will have high skills tend to be when they target specific people or companies, usually paid by crime lords or rivals. Such scenario is very unlikely to happen to the average joe.
Don’t get me wrong here, I’m not saying that security measures are unnecessary. I’m just telling how most criminals operate around here, and highlighting how we tend to overestimate people’s tech skills.
I’m in the same boat as you. Totally agree!
I need a new phone but I want one with a good battery.
Looking at pixels for gOS but worried about battery life compared to something like Moto Edge+ or Oppo 11.
I’ve been using a Pixel 6a with GrapheneOS and the battery life is just fantastic. Sometimes I can go for a whole week without charging, but this is the exception. But under normal circumstances, I still get like 3 days of battery life. You don’t need to be worried about that at all, battery life is even improved on GrapheneOS compared to the Stock ROM.
Dang a whole weeks seems like you’d have to not use it at all.
I have an s10e currently (been using it for over 4 years now) and the battery is shot. I’m at like 30% by noon. I use a lot of Bluetooth throughout the day at work. Basically 10 hrs of Bluetooth a day.
I just never see pixels on the top battery life for phones round up and that make me nervous.
I want something that will be at 30%ish when I go to bed.
On average I get like an hour and a half of screen time per day. I use my phone to message people on Signal, I connect it to my bluetooth earbuds and listen to music or a podcast when I go for a run and I occasionally like to take photos. I don’t waste my time scrolling through TikTok for 8 hours like many other people unfortunately do. One week of battery life is pretty rare, but it has happened before. As I said, usually I get 2-3 days out of it when I it charge up to 80%. (charging up to 100% is bad for battery health, so I try to avoid it). I’m sure you will be fine. You can get a Pixel, install Graphene, try it out and give it back and receive a refund if you don’t like it. That’s the good thing about Pixels, installing a custom OS doesn’t void the warranty or anything like that. You can just revert back to the stock OS and everything will be fine.
I guess with the amount of spyware you will not be running on GrapheneOS will certainly help you with battery life.
Did you consider that I don’t give a fuck?