• Texas_Hangover@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    79
    ·
    3 days ago

    “This actually caused some annoyance among law enforcement officials who believed they had suspects’ phones stored in a readable state, only to find they were rebooting and becoming harder to access due to this feature.”

    I love it.

  • oldfart@lemm.ee
    link
    fedilink
    English
    arrow-up
    43
    ·
    4 days ago

    Good security feature but only for the phone in your pocket. The old one used as a camera, homeassistant screen, sms to email forwarder, ssh server, will stop being useful.

    • That’s why GrapheneOS had this feature for a long time, but with the ability to disable it. It also allows you to set the time period after which the reboot is initiated yourself. You can go as low as 10 minutes, or as high as 72 hours.

      • pfkninenines@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        ·
        3 days ago

        On the 9to5Google article it says

        Update 4/16: Google has updated the changelog entry to add that auto-reboot is “optional” when it comes in the “future.” This addresses some concern from people who run continuous Android devices, with tablets somewhat fitting into that.

        • CarrotsHaveEars@lemmy.ml
          link
          fedilink
          English
          arrow-up
          4
          ·
          3 days ago

          Website: Skynet is dooming the world tomorrow!

          Website: Update: You can just tell it not to doom the world if you don’t want it. Nothing more to see here. Move on.

          Typical.

    • hefty4871@lemmy.ca
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      3 days ago

      The old one isn’t getting any updates and won’t see this change.

    • panicnow@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      2
      ·
      3 days ago

      I had this problem when Apple introduced this feature a year or so ago. I wish Apple had a way to disable it, but such is apple. Now I unlock a phone that lives on my dresser every few days.

  • cholesterol@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    3 days ago

    Like Apple’s devices, Android phones are most secure when they’ve been freshly rebooted. In this “Before First Unlock” (BFU) state, biometrics and location-based unlocking won’t work. The only way to access the device is to use the passcode or PIN. Additionally, all the data stored on the phone is encrypted in the BFU state, making retrieval and snooping much more difficult, even for law enforcement groups that have access to advanced data recovery tools.

  • Eager Eagle@lemmy.world
    link
    fedilink
    English
    arrow-up
    63
    arrow-down
    1
    ·
    edit-2
    4 days ago

    That’s good, if I don’t unlock my phone for 3 days, either the phone is lost or I’m dead.

  • Pika@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    44
    arrow-down
    1
    ·
    edit-2
    3 days ago

    I like it but, why so long? If I haven’t unlocked my phone in 24 hours I’m either dead or hospitalized, 3 days seems super extreme.

      • jagged_circle@feddit.nl
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        3 days ago

        If the screen is off, idk wtd background apps you’re running that would drain so much…

    • n2burns@lemmy.ca
      link
      fedilink
      English
      arrow-up
      25
      ·
      4 days ago

      3 days seems like a good “default” but I agree I’d definitely like the option to make it shorter.

      • Pika@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        3 days ago

        3 days in my opinion is too long imo for a default, if the entire point of it is to increase the security, the default gives 3 days worth of time for an entity to obtain a way to access it via some form of exploit or other means. That’s far long enough for most shipping options to send the device elsewhere that may have the appropriate tech to do so.

        A 24h limit would significantly decrease the margin for exploitation. I agree the setting should have multiple time intervals though, I just think 3 days is way too long for the purpose of the setting. It seems like a “we wanna do something that sounds good, but won’t rock the boat for the powers that be”

    • vrighter@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      3 days ago

      or maybe, I have replaced it with a newer phone, and repurposed it as some sort of lightweight server or something. So it doesn’t get unlocked anymore, ever

      • Pika@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 days ago

        If that’s the case hopefully there will be a setting to disable the feature as a whole as every 3 days would be annoying for a server,

    • Phuntis@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 days ago

      honestly I reckon 12 hours would be good enough I only really sleep 6-7 hours and I’ll check my phone within half hour at most of waking up usually straight away and I need to watch something relaxing before sleeping so it’ll have been used just before I slept so I think 12 hours would be fine and on the super rare maybe I’m awake a super long time for reasons and sleep 12 hours ok the consequence is I have to unlock my phone with a pin instead of my finger and do it twice cause sim lock not that big a deal hell I think 10 hours would be too extreme and would trigger a bit even for me but I reckon it wouldn’t that often

  • bigFab@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    2 days ago

    Settings - Apps - App management - Google Play Services - Disable - Disable App

    • FauxLiving@lemmy.world
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      1
      ·
      4 days ago

      You want to do this even with custom roms.

      Having your phone automatically go into the BFU state ensures that there’s only a small window for a thief to extract data from your phone.

      If you ever think your phone is about to be stolen or seized you want to power it off for this exact reason.

      • catloaf@lemm.ee
        link
        fedilink
        English
        arrow-up
        29
        ·
        4 days ago

        They’re saying custom ROMs like Grapheneos have had this for a long time already.

        • FauxLiving@lemmy.world
          link
          fedilink
          English
          arrow-up
          14
          ·
          edit-2
          4 days ago

          I read it as “This is a silly Android thing that I don’t have to deal with because I use custom roms”.

          I use Graphene and use this feature, but I can understand why it would seem silly to some people and I can think of use cases where you wouldn’t want it to happen (like using your phone as a security device with Haven (https://github.com/guardianproject/haven)) installed.

          Most Android users don’t understand the BFU/AFU states and the security implications, it is good that default android is including a sane security default that’ll be pushed out to the standard Android users.

        • FauxLiving@lemmy.world
          link
          fedilink
          English
          arrow-up
          12
          ·
          4 days ago

          It is not enough to lock the phone.

          An advanced attacker that has access to forensic imaging tools can pull data off of your phone as long as it has been unlocked the first time after boot.

          There are some models and some OSs (like Graphene on the newest Pixels) that are safe, for the time being, in AFU mode. You still want to power the phone off if you have the chance.

          In your friend’s situation, his phone can be powered, isolated from RF to prevent remote wiping and kept in a lock state in order to preserve the keys in memory until an exploit is found for that model. If the OS automatically reboots after 3 days, it prevents this kind of attack.

  • ☂️-@lemmy.ml
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    4 days ago

    i think samsungs already do this. as long as i can turn it off if i ever need to.

    a charging limit would also be nice.

    • GissaMittJobb@lemmy.ml
      link
      fedilink
      English
      arrow-up
      4
      ·
      3 days ago

      Pixels can be configured to limit charging to 80% these days.

      I’ve started using it and the difference between using 80% and 100% on a daily basis is negligible, I rarely if ever let my device go below about 35% anyway. So this change is basically free battery life for the device

    • Aussiemandeus@aussie.zone
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 days ago

      Samsung have a setting to set the charger to only charge to a certain amount over night

      So if you plug it in at 1800 at 0230 or whatever it won’t be charging until just it calculates that it will be full charged when you wake up

  • mindbleach@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    7
    ·
    4 days ago

    The latest Google update will make your phone more secure if you don’t touch it…

    Fuck entirely off. The last time my phone surprised me with an update, it was ads on my goddamn lock screen.

    • kalipixel@reddthat.com
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 days ago

      Google itself as of this moment never did put adds on a lock screen, it is the manufacturer or third party apps who can do it. Some Realme and Xiaomi phones do it afaik and probably some other brands.

      • mindbleach@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        4
        ·
        edit-2
        3 days ago

        Oh sure, Google only fucks with how texting works, whether my car GPS cooperates, what the entire UI looks like…

        I know this specific abuse was not Google’s fault specifically. But it’s the same god damn thing. Nobody asked me if I wanted that. They just shoved it onto the machine I paid to own and pay to use, like it’s not mine enough to deserve respect, let alone control.

      • mindbleach@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 days ago

        It’s Metro’s fault.

        I fucking hate that three separate skeezebag companies have free reign to insert software on my extremely personal wireless pocket computer.