[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip / qa] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology


Thread archived.
You cannot reply anymore.


[Advertise on 4chan]


File: shit.png (721 KB, 1080x720)
721 KB
721 KB PNG
how much do they actually matter? my shitty phone just got its last one today and i can't upgrade until december because i'm a poorfag
>>
divestos
>>
>>96086612
>how much do they actually matter?
A lot. New 0-days for Android are common and actively exploited all the time.
>my shitty phone just got its last one today and i can't upgrade until december
Enjoy having all your personal information stolen by any scammers that can manage to get an ad on your screen or a malicious website to load at all.
>>
>>96086636
In many cases you just need webp and webm to exploit your phone zero clicks needed
>>
File: bocchi-stare.jpg (56 KB, 665x580)
56 KB
56 KB JPG
>>96086612
As much as any other security update. So alot.
I've seen people's phones get fucked because they have decade old shit.
>>
I have delayed updates from december last year because I got angry with how they restricted file access
>>
>>96086769
>webp and webm to exploit your phone zero clicks needed
I refuse to believe this
>>
>>96086636
so the problem is personal data? what personal data do people have on their phones?
>>
so there's two custom ROMs available for my phone. one has encryption but no security updates while the other has security updates but no encryption. which is more important?
>>
File: 453227454227.png (191 KB, 680x760)
191 KB
191 KB PNG
>>96086612
My lg velvet hasnt received an update in 2 years. Fucking pussies.
>>
I probably would care only if you use banking apps or whatever otherwise just turn that shit off
>>
>>96086636
>New 0-days for Android are common
false. they're difficult to find.
>>96088203
banking apps only check if they are able to access root, and even that can be bypassed.
>>
>>96087940
>>webp and webm to exploit your phone zero clicks needed
>I refuse to believe this
https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/
https://www.theregister.com/2023/09/12/chrome_browser_webp_exploit/
people's garbage programming makes anything possible.
>>
File: glowie.jpg (31 KB, 356x360)
31 KB
31 KB JPG
>>96088161
>>
>>96088306
This nigger probably has malware on his phone and doesn't know it.

Yes, security is a meme. Don't take reasonable precautions like having security updates.
>>
Biggest issue with these "exploits" is the fact most people are so retarded they have 50 different spyware apps on their phones, 15 different social media logins, 10 separate photo "apps" which all require some form of account login and on top of this they use their banking and even work emails from the same device. And use some shitty public wifi whenever possible and whatnot.
Most users are too stupid these days and it shows.
>>
>>96088081
>I have to lose either my kidneys or intestines
>Which one is more important?
>>
File: 1458350805154.jpg (24 KB, 456x297)
24 KB
24 KB JPG
>>96086612
My phone hasn't gotten a security patch since March, and I've never had an issue. But I'm not a retard who blithely opens e-mail attachments, sideloads random jeet apks, grants random apps blanket permissions, or taps on random links. Security patches lull users into a false sense of security. Just don't be a retard instead.
>>
>>96088614
>This nigger probably has malware on his phone and doesn't know it.
i've been hacking phones since nokia were bricks with green backlit displays. i don't get hacked. i know how this all works. i bet you don't even have a fucking firewall, tyrone.
>>
>>96088650
you will only get updates IF something is wrong. i question the sanity of those crippled retards that go:
> wow. my phone gets updates all the time! they really must care!
if incompetence is caring then i must have woke up in a different dimension somewhere along the timeline
>>
i havent updated mine in some years because along with the security updates it also introduces stupid bullshit that i dont want
>>
>>96088733
these niggas have some nerve locking this shit at OS level so you can't delete it or disable it.
>>
>>96088691
>doesn't understand software exploits
Like pottery
>>
>>96088161
Was this intentional? Based, then. Latest update was in June 2023. These updooters are just a bit over the top
>>
File: 1673517341830497.jpg (170 KB, 1080x2340)
170 KB
170 KB JPG
i dont know and dont care. i firewalled my phone on router level on openwrt and pass proxy from my nas to allow connection only from trusted browser and termux
phone cant ping home or know about updates now
>>
>>96087358
>I've seen people's phones get fucked because they have decade old shit.
things that never happened
>>
I haven't updated my phone for 2 years since the pajeet ROM OTA updater stopped working
>>
>>96088799
> coping this hard
you're not very smart.
see:
>>96088728
>>
File: file.png (196 KB, 720x1280)
196 KB
196 KB PNG
>>96086636
>>96087358
suck my cock glowie, I'm not gonna install your "security" shit
hack me whenever you want
>>
>>96086636
>personal information stolen
why would i have personal information stored on something as volatile as phone that can easily be lost?
>>
android is way more 'locked down' than say, windows. is an exploit is usually just going to lead to a crash over bluetooth. if your phone isnt easily rooted without plugging it in to a pc then its probably safe for the time being.
>>
>>96086612
You can check the CVEs
medium issues that get patched all the time
https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-19997/Google-Android.html
It is ideal to have updates.
It needs to be said however that lately google has started separating parts of the android operating system. some security updates are handled by google directly.
>>
>>96086612
>can't upgrade for 2.5 months
it's over. might as well give away all your cash and private photos/info now.
>>
>>96086636
>get an ad on your screen or a malicious website to load at all
I don't play games or use shitty apps on my phone, and the very few times I visit a site it's firefox + ublock origin
>>
>>96088961
>hack me whenever you want
You've been hacked a million times already, but nobody that hacked you has announced it to you.
>>
>>96090198
kek
have fun with my pepe pics and my shitposting history I guess
>>
>>96090444
>have fun with my pepe pics and my shitposting history
I'm having more fun selling your name, photo, phone number, email address, email contents, browsing history, contacts list, text messages, location history, and call logs to shady advertisers and identity thieves.
>>
>>96090463
>your name
>photo
>email address
>email contents
>browsing history
>text messages
>location history
no such things on my phone
>phone number
>contacts list
already got that from my contacts who are retarded despite having the latest security patches
>call logs
good for you I guess
>to shady advertisers
no ads on my devices
>identity thieves
I'm nobody and I'm really intrigued what could they do with my phone number and call logs
>>
>>96090523
>no such things on my phone
That's what you think
>>
>>96090534
kek, who are you trying to convince?
>>
>>96090740
I'm just having a conversation with you bud. Were you posting with the expectation that nobody would ever reply to you?
>>
>>96090762
I love (You)s just like anyone else
thanks bro
>>
>>96088961
nobody cares about you because you have $0 in your bank account and nobody cares about your hentai pics. but normal people have things to lose
>>
>>96086612
>how much do they actually matter? my shitty phone just got its last one today and i can't upgrade until december because i'm a poorfag
A lot. agree with >>96086636
> personal information stolen by any scammers that can manage to get an ad on your screen
this is what happens, since apps have inferior and non-sandboxed web viewer shit thing what happens is the apps/games MAY self-serve their own ads.
maybe if it was a google ad network then it's fine but some apps do have their own ads and load stuff on the app. yes your file browser? is actually a WEB BROWSER and I can easily put an ad that can use hyperlink auditing by making that file browser compliant and make it seem everything is hyperlinks, this lets me obtain your file names and other shit, I can even make a screenshot using JS and a lot more, it's turing complete what else can I ask for? and with an actual web browser (google chrome OR firefox) you don't get this problem since those have sandbox capabilities but with the app/game I can do a lot more.
yes even my malicious javascripts which are supposed to get "blocked" I can just hash and "character escape" them and it will run malicious code. now do that with rowhammer over ads js + app + permissions (for extra goodies) and now I can collect all these:
screenshot of your app's content (js screnshot, char escaped if blocked)
file names of file manager (mind you, hyperlink auditing)
kernel crash privilege escalation + exfiltration (js >> rowhammer, pegasus-like)
audio data, photo/video data, thumbnails data (himitsu)
and no. security updates won't protect you at all, maybe at some point it will but remember this:
IT'S ALWAYS TOO LATE
the reason you require too much security updates in the first place is SIMPLY BECAUSE it is insecure as fuck.
>>
it depends on who are you and who are your enemies. if you actively want the jews to kill you, them you should care, but for 99% of people it means jack shit.
>>
>>96086612
>android 8.1.0
>system says im up to date
simple as



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.