Live data from Hacker News

Google urges Android phone users to switch off Wi-Fi calling

scrippsnews.com

51–60 of 178 posts

Re: Google urges Android phone users to switch off Wi-Fi calling

#51

If you click through to the Project Zero blogspot it says the Mar 2023 security update fixes the issue for the Pixel devices. My Pixel 7 didn't show an update was available (last checked 30 minutes ago) but when I manually checked it found it and downloaded it.

They only released the March update for my Pixel 6a this morning, I did breathe a sigh of relief once it was installed.

Re: Google urges Android phone users to switch off Wi-Fi calling

#52
post #41

At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…

You're thinking in terms of on-the-map coverage. Real-world coverage is affected by stuff in the way. I know plenty of people who can just barely get texts on a good day unless they go outside and wave their phone around. Phone calls are out of the question without Wi-Fi.

Re: Google urges Android phone users to switch off Wi-Fi calling

#53
post #14

I am not sure I understand this. I have a S22 Galaxy Ultra. I do not see anywhere in my settings to turn on or off wifi-calling. Did we already get an update disabling this? I have googled this for about 10-15 minutes now and none of the results match anything to do with my screen settings.

FYI if you bought your S22 Ultra in the US, it probably isn't necessary. Only the European models were shipped with the Exynos chipset and would be vulnerable. The US version was shipped with a Qualcomm chipset, so it shouldn't be an issue.

(This is what I recall on the top of my head though, so you might want to double check this info)

Re: Google urges Android phone users to switch off Wi-Fi calling

#55
post #41

At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…

any international travel. i'm in the bahamas now and had a nice conversation with someone who won't install whatsapp. 6 months ago I was in Colombia and was able to take care of some banking problems back home. Plus, texts are delivered and sent while you're away. (And...I do know people in the US who are in cell weak spots that wifi calling solves)

I find that international roaming is cheaper than ever. Some carriers like T-Mobile (US) and Google Fi include it for free.

Re: Google urges Android phone users to switch off Wi-Fi calling

#56

Well, this was an awkward way to realise my phone hasn't been receiving security updates for years. Apparently Google quietly dropped support for it? The phone is otherwise in excellent condition. Any recommendations for a good third party OS that still supports Pixel 2?

How was this quiet? This is usually published by Google and other web sites when security updates have needed on the Pixel Phones. Given you're a HN user I assume you are fairly tech savvy and knew when you bought your phone it was only going to get security and system updates for 3 years.

I think it's "quiet" in the sense that they don't send a push notification to affected phones when they're about to go EOL, so you don't know it happens unless you go out of your way to check.

Re: Google urges Android phone users to switch off Wi-Fi calling

#57
post #12

Earlier quoted context omitted.

Honestly, unless it's a remote, worm-grade exploit or you're a high value target, you can probably just stop caring about software updates. Your threat model might be different but I don't get out of bed for anything but RCE personally, let alone spend a penny.

A phone (or any kind of internet-connected computer) that's been completely unsupported for years will presumably be low-hanging fruit for even the cheapest and crustiest of exploit kits.

Most code that interacts with the internet is updated via other mechanisms. For example, web browsers are kept up to date via Play Store: Firefox for Android, Chrome and even the embedded WebView are all updated there.

Re: Google urges Android phone users to switch off Wi-Fi calling

#58
post #41

At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…

It really depends on where you live or where you commonly use your phone. In the US at least, there are huge areas all over that have little or no cell coverage. In the SF Bay Area, home of Silicon Valley, we have plenty of spots where people live where there's zero coverage. In those places, if you walk too far away from your house (and Wi-Fi) your cell phone is useless.

Where I live, I basically agree, but as far as I can tell Wi-Fi calling is much better audio quality.

Re: Google urges Android phone users to switch off Wi-Fi calling

#59

Earlier quoted context omitted.

I guess, but it sure is nice that on Apple hardware you generally don’t need to worry about doing this calculus because they deliver updates in a timely manner to even five year old devices. It bums me out that them doing this hasn’t been effective in shaming everyone else into following suit.

According to Wikipedia the Pixel 2 received security updates for less than 3 years. None of their devices got more than 3 years 3 months of updates. That should be illegal honestly, couldn't be more clear that they don't care about sustainability. https://en.m.wikipedia.org/wiki/Google_Pixel

If you could demonstrate harm from a vulnerability, you could probably ask a court for some compensation.

Just like if your lawnmower exploded with a known flaw, you would sue the lawnmower manufacturer.

Re: Google urges Android phone users to switch off Wi-Fi calling

#60
post #12

Earlier quoted context omitted.

Honestly, unless it's a remote, worm-grade exploit or you're a high value target, you can probably just stop caring about software updates. Your threat model might be different but I don't get out of bed for anything but RCE personally, let alone spend a penny.

A phone (or any kind of internet-connected computer) that's been completely unsupported for years will presumably be low-hanging fruit for even the cheapest and crustiest of exploit kits.

That is, to put nicely, forced-obsolescence FUD. They want to scare you away with words like "unsupported" so they can keep you on their leash.

With the state of software development today, I'd be more worried about how many other holes they've added in the process of fixing something or introducing unwanted new "features"[1].

Here's some interesting statistics to look at and compare...

https://www.cvedetails.com/product/462/Microsoft-Windows-98s... - 30 RCEs in 7 years

https://www.cvedetails.com/product/739/Microsoft-Windows-Xp.... - 276 RCEs in 20 years

https://www.cvedetails.com/product/32238/Microsoft-Windows-1... - 664 RCEs in 8 years

https://www.cvedetails.com/product/102217/Microsoft-Windows-... - 157 RCEs in 2 years

More relevantly:

https://www.cvedetails.com/version-list/1224/19997/1/Google-...

[1] https://news.ycombinator.com/item?id=28449607

Post reply on HN