They stole the idea from GrapheneOS and shipped a barely half-baked version with hardcoded time. GrapheneOS has configurable time for it since years
I'd claim that Microsoft pioneered this time limit security concept with Windows 95 almost 30 years ago. They went with 2^32-1 milliseconds or about 49.7 days. We don't talk enough about Microsoft's strong legacy of security innovations, IMHO.
Android phones will soon reboot themselves after sitting unused for three days
141–150 of 357 posts
Re: Android phones will soon reboot themselves after sitting unused for three days
#142Isn't this stupid? Why not flush something properly in the RAM instead to wipe the "cached" secrets? A full restart feels like an overkill.
That "something" is at least the entire userspace, so any attempt at doing so ends up being UX-equivalent to a full restart - while having a decent chance of leaving unintended trace data lying around in memory. A full restart guarantees that everything will be wiped.
Re: Android phones will soon reboot themselves after sitting unused for three days
#143Earlier quoted context omitted.
This makes no sense, Android already will reboot itself after receiving an update and being inactive for a while (generally while charging it will install the update in its secondary partition, do some verification checks and reboot if there is no user interaction).
This sounds vendor-specific and not general for Android. I've never had that happen on any device but Windows and I would be very upset if it did happen.
Re: Android phones will soon reboot themselves after sitting unused for three days
#144It's good to have an option like that, even being a default, but there definitively need a switch to disable that if it is your own will. It's not even necessarily that good enough against cops, because in a lot of shitty countries, even some pretending to be democratics, not disclosing or at least inputting your password might be a crime severely punished. If I'm not wrong, there was a guy that had to stay years in…
It’s a good and reasonable feature, especially if for some reason you are afraid of state or security agencies in a place where you live, or maybe during travel. It’s still questionable, because in some states you can indeed go to jail if you don’t unlock. Yet, I really want to be able to turn it off for use-cases like mine.
Re: Android phones will soon reboot themselves after sitting unused for three days
#145Earlier quoted context omitted.
A wipe seems extreme. An unexpected trip to the hospital could leave someone with a wiped phone when they come to.
If that’s something you are worried about, don’t choose that option.
Re: Android phones will soon reboot themselves after sitting unused for three days
#146I just want software that will do nothing user-observable without me explicitly asking it to. No pop-ups, no suggestions, no automatic anything. I don't know if it'll take a fancy buzzword or what. Unobtrusive software? Silent Software?
Re: Android phones will soon reboot themselves after sitting unused for three days
#147Earlier quoted context omitted.
If that’s something you are worried about, don’t choose that option.
Is there a person on this planet where an unexpected hospital visit could not happen?
Re: Android phones will soon reboot themselves after sitting unused for three days
#148Earlier quoted context omitted.
I'd claim that Microsoft pioneered this time limit security concept with Windows 95 almost 30 years ago. They went with 2^32-1 milliseconds or about 49.7 days. We don't talk enough about Microsoft's strong legacy of security innovations, IMHO.
I'm pretty sure you're joking. Windows 95 crashed if you sneezed in its general direction, I'm pretty sure it would blue screen due to some edge case well before 49 days of runtime.
Re: Android phones will soon reboot themselves after sitting unused for three days
#149Earlier quoted context omitted.
But I think connecting a device that can be used as authentication method without choosing a defense would negate the purpose of advanced data protection of your account and other devices.
Let's say I'm not super heavy Apple service user. For me Advanced Data Protection is defence against Apple itself and ability to keep little information I share via iCloud somewhat secret: mostly another backup of some photos and few other things. It's not like I'm trying to defend against some state actors or whatver.
Re: Android phones will soon reboot themselves after sitting unused for three days
#150Earlier quoted context omitted.
It's good to be able to disable this option: I use old Android phones as servers and don't want them to reboot every 3 days.
https://xkcd.com/1172/ Don't think old Androids will get this update.