71–80 of 183 posts
We were just reading "Android security in 2016 is a mess"[1] 2 days ago and now we have another great example for it. https://news.ycombinator.com/item?id=13056288
"Windows is a mess because you can install a virus executable on it." "You can't install Windows software outside App Store anymore, MS is taking muh freedoms." You can't win.
We were just reading "Android security in 2016 is a mess"[1] 2 days ago and now we have another great example for it. https://news.ycombinator.com/item?id=13056288
"Windows is a mess because you can install a virus executable on it." "You can't install Windows software outside App Store anymore, MS is taking muh freedoms." You can't win.
Personally I'd say that most non-technical computer users are better off using a more locked down/secure OS (e.g. iOS) as they are generally ill-equipped to manage an open computing platform with the current level of threats that there are out there.
We were just reading "Android security in 2016 is a mess"[1] 2 days ago and now we have another great example for it. https://news.ycombinator.com/item?id=13056288
"Windows is a mess because you can install a virus executable on it." "You can't install Windows software outside App Store anymore, MS is taking muh freedoms." You can't win.
Apple makes the choice with iOS to be closed. People hate on that because they distrust a centralized authority with good reason, however it is far safer for those who don't mind giving up control.
Google makes the choice with Android to be open. People hate on that because they want the system to be safe, however it is in the control of the end user for those who don't mind taking responsibility for the safety of their own device.
Both absolutely win at what they are trying to be.
MS on the other hand tries to pretend to be both while actually not delivering the benefits of either. That is certainly a way not to win.
We were just reading "Android security in 2016 is a mess"[1] 2 days ago and now we have another great example for it. https://news.ycombinator.com/item?id=13056288
"Windows is a mess because you can install a virus executable on it." "You can't install Windows software outside App Store anymore, MS is taking muh freedoms." You can't win.
Earlier quoted context omitted.
No gmail, gmaps, gphotos ? do you have replacements ? pse: thanks all AP a lot for suggestions :)
K9Mail with Fastmail, AddressToGPS + OSMAnd, I back up my own photos with a home server and some rsync (Syncopoli). There is PhotoBackup which is kind of neat though. We use Google Calendar for stuff at work, Google still has an old psuedo-deprecated-not-talked-about CalDav endpoint I hit with DavDroid that gives me all of that. These problems were solved with protocols long before gardens. I use offlineCalendar(Yes…
The only thing I'm still missing is public transit navigation.
I do have the Play Store installed though - through OpenGApps pico - I only have the Play Store, none of the other Google stuff - with a dummy gmail account.
> While Google implemented multiple mechanisms, like two-factor-authentication, to prevent hackers from compromising Google accounts, a stolen authorization token bypasses this mechanism and allows hackers the desired access as the user is perceived as already logged in. What's the right fix here? Should auth tokens be ip-address-tied? How much will that break? Or would that not even fix it?
Won't fix the problem when there's malware on the same device that the auth token was stolen from...
Malware on your Android device picked up from third party app stores (FDroid? Amazon?) that steals email accounts and auth tokens. Looks like it only works on the older Android 4 Jellybean software (and some Android 5 Lollipop) and below, so mostly concentrated in Asia where there are lower-end phones. You can see if your account has been affected here: https://gooligan.checkpoint.com/
Thanks for making this comment. This post is a wonderful example of the rampant marketing that has given the security industry a bad name. - The title is technically accurate, which is the best kind of accurate for clickbait. This is not a novel vulnerability representative of an application security flaw within Google - the malware campaign specifically targets older devices using previously known vulnerabilities.[1…
Earlier quoted context omitted.
K9Mail with Fastmail, AddressToGPS + OSMAnd, I back up my own photos with a home server and some rsync (Syncopoli). There is PhotoBackup which is kind of neat though. We use Google Calendar for stuff at work, Google still has an old psuedo-deprecated-not-talked-about CalDav endpoint I hit with DavDroid that gives me all of that. These problems were solved with protocols long before gardens. I use offlineCalendar(Yes…
Funny, I use exactly the same apps on my Cyanogenmod phone - K9 + Fastmail, OSMAnd. There arnt that many good alternatives to Google, apparently. The only thing I'm still missing is public transit navigation. I do have the Play Store installed though - through OpenGApps pico - I only have the Play Store, none of the other Google stuff - with a dummy gmail account.
Does anyone else use a special account for their Android phone that they don't use for anything else?
So wait this is phishing, not actually hacking into Google to breach accounts if I understood it correctly? In that case, I suppose the title might be technically correct (those accounts are indeed breached), but it makes it sound like Google is to blame.