Live data from Hacker News

Android phones will soon reboot themselves after sitting unused for three days

arstechnica.com

11–20 of 357 posts

Re: Android phones will soon reboot themselves after sitting unused for three days

#11
post #6

Isn't this stupid? Why not flush something properly in the RAM instead to wipe the "cached" secrets? A full restart feels like an overkill.

Not really.

Restart - simple with known and predictable effects, data no longer accessible, all secrets flushed no matter where they were or cached.

Turn off disk encryption, suspend all running services, overwrite all secrets in the O/S wherever they are, and then restore all that on entering password. Probably can't do anything about secrets cached by actual apps. Complex, hard to maintain and probably buggy.

Re: Android phones will soon reboot themselves after sitting unused for three days

#12
post #6

Isn't this stupid? Why not flush something properly in the RAM instead to wipe the "cached" secrets? A full restart feels like an overkill.

That "something" is at least the entire userspace, so any attempt at doing so ends up being UX-equivalent to a full restart - while having a decent chance of leaving unintended trace data lying around in memory.

A full restart guarantees that everything will be wiped.

Re: Android phones will soon reboot themselves after sitting unused for three days

#15
I just want software that will do nothing user-observable without me explicitly asking it to. No pop-ups, no suggestions, no automatic anything.

I don't know if it'll take a fancy buzzword or what. Unobtrusive software? Silent Software?

Re: Android phones will soon reboot themselves after sitting unused for three days

#16
Not bad. If I could make a feature request it would be something like, After 3 days of being idle:

- [ ] Reboot

- [ ] Power Off

- [X] WIPE triple opt-in

Maybe there is a custom phone OS for this that makes the phone act more ephemeral and network boot off my self hosted iPXE/immich server? A dumb smart phone so to speak. An ephemeral diskless phone.

Re: Android phones will soon reboot themselves after sitting unused for three days

#19

It's not great news for my old phone used for wifi at our guesthouse (let's a few security cams and our smart lock get online)

You should be able to switch this off, if you notice it being enabled, so (now you know about it) it should be a one-time downtime.

I skimmed through the docs, couldn't see anything about soaking disabling it.

Re: Android phones will soon reboot themselves after sitting unused for three days

#20
I'm surprised this is something taken seriously only now by stock android. Isn't it known universally that AFU devices are insecure? What's the point of adding strict password policies, biometrics etc, if data from a stolen phone can be (relatively) trivially be exfiltrated unencrypted?

Samsung's have had some feature that lets you set days of the week for the phone to restart (IME during early morning hours) automatically. It's not perfect but it's something. iOS seems to have some unclear logic to either restart or re-request password (not biometrics).

This should be standard

Post reply on HN