71–80 of 178 posts
For CalyxOS users this has been fixed in 4.7.x [1] https://calyxos.org/news/2023/03/18/another-march-update/
Confused, is this OS-level or baseband-level? If it's OS-level, how is there no mention of an Android version? If it's baseband-level, how can the OS fix it?
Earlier quoted context omitted.
A phone (or any kind of internet-connected computer) that's been completely unsupported for years will presumably be low-hanging fruit for even the cheapest and crustiest of exploit kits.
That is, to put nicely, forced-obsolescence FUD. They want to scare you away with words like "unsupported" so they can keep you on their leash. With the state of software development today, I'd be more worried about how many other holes they've added in the process of fixing something or introducing unwanted new "features"[1]. Here's some interesting statistics to look at and compare... https://www.cvedetails.com/pro…
Well, this was an awkward way to realise my phone hasn't been receiving security updates for years. Apparently Google quietly dropped support for it? The phone is otherwise in excellent condition. Any recommendations for a good third party OS that still supports Pixel 2?
I've been a (happy) Lineage OS user since 2013, and Pixel 2 is still supported by them, so you can check them out. But note that the security updates provided by Lineage OS only pertain to the Android part, not the modem part. This isn't something that a third party OS vendor can fix, as the modem/firmware updates are supplied by the device vendor. And even those are reliant on their suppliers, so ultimately unless t…
Also, I thought I recognised your username. I use at least one of your crates. Thanks for those, too! :)
At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…
I have minimal cell signal in my house. It’s a godsend.
Earlier quoted context omitted.
Pixel 6 and 7 are also guaranteed security updates for at least 5 years: https://support.google.com/pixelphone/answer/4457705
And yet Google used Exynos for those designs. Somehow Samsung must have told project zero that they didn't need to release a fix - a project run by their customer for this SoC. But promptly after disclosure a fix appears. I guess it's good that they'll come out for five years, but it's probably worth a little bit of doubt on our part whether Samsung will actually deliver on that promise.
Earlier quoted context omitted.
I guess, but it sure is nice that on Apple hardware you generally don’t need to worry about doing this calculus because they deliver updates in a timely manner to even five year old devices. It bums me out that them doing this hasn’t been effective in shaming everyone else into following suit.
The iPod Touch Gen 7 lasted just under 3 years from release. They may be better than many others but I just got bit by that one.
I wonder if Apple views the "iPod" branding as being more associated with gaming and consumption and therefore less important from a security standpoint. I don't think I necessarily would agree with such a stance when the exact same hardware can carry sensitive stuff like a password manager, banking and medical apps, and so-on. But I imagine their telemetry showed that that overwhelmingly wasn't the case, so it was easy not to prioritize it.
I am curious whether attacks on this can be blocked at the carrier level.
Worst case you could do carrier level forwarding (via website or code so the call never hits your phone) to another number that you can also use on your device independent of the modem call handling. Obvious candidates would be Google Voice, Zoom Phone or other VOIP options. Google and Zoom may be the simplest options unless you're already using a SIP provider with a decent app, standalone SIP apps seem to be a weak area for app development. Last time I looked Zoiper and Grandstream Wave seemed like the best options not tied to specific VoIP providers.
Edit: Obviously this will then involve using that app for receiving calls, but you should be fine making outbound calls with your regular number.
Edit2: if using Zoom keep in mind that it limits the number of devices you can be simultaneously signed in on which may impact either receiving calls on your phone or being on Zoom conferences from larger devices like tablets.
Earlier quoted context omitted.
That is, to put nicely, forced-obsolescence FUD. They want to scare you away with words like "unsupported" so they can keep you on their leash. With the state of software development today, I'd be more worried about how many other holes they've added in the process of fixing something or introducing unwanted new "features"[1]. Here's some interesting statistics to look at and compare... https://www.cvedetails.com/pro…
Are you claiming that unpatched software is more secure than patched software?
However that ignores the fact that publicly known exploits are more dangerous for the average user than zerodays.
At this point I'd have to say that Wi-Fi calling is a dead feature, putting this particular issue aside. I just don't see the benefit in 2023. It made sense back when cellular networks were less mature. It also made sense when it could cut down on your wireless bill. But all you have to do is walk out of your house while on a phone call and realize how much the feature is degrading overall reliability. The LTE networ…
Maybe a house that doesn't get cell reception inside, especially older ones with thick walls. Or one that doesn't get cell reception outside either. ??? was that difficult?