There are two versions of the S22, Exynos (Europe) and Snapdragon (everywhere else). Is it correct to assume that the Snapdragon S22 is not affected by this?
Google urges Android phone users to switch off Wi-Fi calling
91–100 of 178 posts
Re: Google urges Android phone users to switch off Wi-Fi calling
#92Earlier quoted context omitted.
A phone (or any kind of internet-connected computer) that's been completely unsupported for years will presumably be low-hanging fruit for even the cheapest and crustiest of exploit kits.
Most code that interacts with the internet is updated via other mechanisms. For example, web browsers are kept up to date via Play Store: Firefox for Android, Chrome and even the embedded WebView are all updated there.
Re: Google urges Android phone users to switch off Wi-Fi calling
#93Interesting that earlier coverage of this also indicated VoLTE as vulnerable, but a lot of phones don't have a way to turn that off - particularly since older protocols that support voice directly have been turned off. I am curious whether attacks on this can be blocked at the carrier level. Worst case you could do carrier level forwarding (via website or code so the call never hits your phone) to another number that…
> Interesting that earlier coverage of this also indicated VoLTE as vulnerable
The initial reporting on Project Zero's findings was pretty clear that this was the case.
>"Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim's phone number," Willis wrote in a breakdown of the security flaws.
Willis suggests turning off Wi-Fi calling and Voice-over-LTE (VoLTE) to protect against baseband remote code execution, if you're using a vulnerable device powered by Samsung's silicon.
https://www.theregister.com/2023/03/17/android_google_projec...
Re: Google urges Android phone users to switch off Wi-Fi calling
#94At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…
I live five miles from the nearest area of cellular coverage due to hilly geography. Wifi calling allows my phone to make calls at home.
(Side note: it does mean that I can't receive SMS messages at home, since Verizon doesn't deliver SMSs over wifi calling.)
Re: Google urges Android phone users to switch off Wi-Fi calling
#95Well, this was an awkward way to realise my phone hasn't been receiving security updates for years. Apparently Google quietly dropped support for it? The phone is otherwise in excellent condition. Any recommendations for a good third party OS that still supports Pixel 2?
I have a Pixel 2 XL and LineageOS with MicroG on Android 13. If you're not interested in degoogling LineageOS plus gapps also works.
Re: Google urges Android phone users to switch off Wi-Fi calling
#96Interesting that earlier coverage of this also indicated VoLTE as vulnerable, but a lot of phones don't have a way to turn that off - particularly since older protocols that support voice directly have been turned off. I am curious whether attacks on this can be blocked at the carrier level. Worst case you could do carrier level forwarding (via website or code so the call never hits your phone) to another number that…
> Interesting that earlier coverage of this also indicated VoLTE as vulnerable The initial reporting on Project Zero's findings was pretty clear that this was the case. >"Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim's phone number," Willis wrote…
Willis suggests turning off Wi-Fi calling and Voice-over-LTE (VoLTE) to protect against baseband remote code execution, if you're using a vulnerable device powered by Samsung's silicon.
The problem is that that's a very sterile way to say "turn off all voice calling features on affected devices" unless I'm misunderstanding how modern cell networks function. Without VoLTE in pretty sure devices need to fall back to 3G (effectively off in most of the world) or 2G (not much better, though it's still around on one carrier in a lot of places for longer distance coverage as I understand it).
Maybe my understanding is completely off, but this seems like writing an article about terrible flaws in automotive wheel bearings and closing with "we recommend that everyone avoid doing things that require use of wheel bearings."
Re: Google urges Android phone users to switch off Wi-Fi calling
#97At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…
Wifi-calling is basically required for rural, semi-rural, hilly, or mountainous areas around here. Huge chunks of the western United States has terrible cellular coverage. I regularly travel to a region with a population density of 0.25 people per sq km, no one is going to erect new towers out there.
Re: Google urges Android phone users to switch off Wi-Fi calling
#98At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…
You're struggling to figure out where wifi calling is helpful, really? Maybe a house that doesn't get cell reception inside, especially older ones with thick walls. Or one that doesn't get cell reception outside either. ??? was that difficult?
Exactly. Cell reception at our house is terrible even though we're in the suburbs. When making a call I get next to the AP.
Re: Google urges Android phone users to switch off Wi-Fi calling
#99At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…
It really depends on where you live or where you commonly use your phone. In the US at least, there are huge areas all over that have little or no cell coverage. In the SF Bay Area, home of Silicon Valley, we have plenty of spots where people live where there's zero coverage. In those places, if you walk too far away from your house (and Wi-Fi) your cell phone is useless. Where I live, I basically agree, but as far a…
> as far as I can tell Wi-Fi calling is much better audio quality
I don't doubt your experience, carriers can absolutely be stupid/frustrating in how they operate their networks, but there's usually little excuse for this. These days its all the same possible codecs, its the same kind of handshake. There's little excuse to not support wideband codecs in regular phone calls with VoLTE and what not.
Re: Google urges Android phone users to switch off Wi-Fi calling
#100Earlier quoted context omitted.
According to Wikipedia the Pixel 2 received security updates for less than 3 years. None of their devices got more than 3 years 3 months of updates. That should be illegal honestly, couldn't be more clear that they don't care about sustainability. https://en.m.wikipedia.org/wiki/Google_Pixel
Qualcomm's lack of support for older chipsets has been blamed for the short lifecycles of these phones. Pixel 6 and 7, which don't use Qualcomm SoCs, both get at least 5 years of security updates.
Google is ten times the size of Qualcomm— there's no way they wouldn't be able to extract those commitments upfront.