• zwekihoyy
    link
    fedilink
    arrow-up
    7
    arrow-down
    3
    ·
    1 year ago

    termux targets an extremely out of date sdk and is therefore quite insecure.

    • original_ish_name@lemm.ee
      link
      fedilink
      arrow-up
      21
      arrow-down
      1
      ·
      1 year ago

      It targets that because those old “insecure” SDKs allows people to use their system as something that isn’t a toy. Newer sdk versions refuse to run code that wasn’t included in the apk

      • zwekihoyy
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Mobile platforms like android and iOS (more specifically GrapheneOS), are leagues ahead of desktop operating systems in terms of security because of these strict policies. and besides, you are treating untrusted code as untrusted code. I don’t see the flaw in that logic.

        sure, they could use more apis for accessing system directories and stuff like that securely, but that’s not really in scope. this is for end users. not field deployment on an sbc for something.

    • SaltyIceteaMakerOP
      link
      fedilink
      arrow-up
      8
      arrow-down
      1
      ·
      1 year ago

      Im gonna be honest i really don’t care about that. There is no sensitive data on my phone except maybe social media logins and i have a recent backup so🤷

      • Orvorn@slrpnk.net
        link
        fedilink
        arrow-up
        8
        arrow-down
        2
        ·
        1 year ago

        Odd choice to use GrapheneOS if you don’t care about security. More power to you, though.

        • 𝒍𝒆𝒎𝒂𝒏𝒏@lemmy.one
          link
          fedilink
          arrow-up
          12
          arrow-down
          1
          ·
          1 year ago

          Odd choice to use GrapheneOS if you don’t care about security

          Not really. People’s threat models differ, some just want to escape Google’s spyware without also requiring your device be a portable iron mountain. Some may also just want the additional control GrapheneOS provides for restricting permissions of apps, or their unique play store handling etc.

          GrapheneOS has a ton of positives besides its security IMO.

          For me it’s just a little saddening that their secure focus conflicts with extending the life of mobile devices. Although really that’s something that probably won’t change unless we get a truly open source mobile platform, with firmware development out in the open.

          • Orvorn@slrpnk.net
            link
            fedilink
            arrow-up
            2
            ·
            1 year ago

            I trust you have your own threat model and know what’s best for you, but in my opinion privacy necessitates security.

        • SomeBoyo@feddit.de
          link
          fedilink
          arrow-up
          5
          ·
          1 year ago

          The long term support might make it worth using, even if you don’t care about security/privacy

          • Mnmalst@kbin.social
            link
            fedilink
            arrow-up
            3
            ·
            1 year ago

            @SomeBoyo What “long term support”? Official GrapheneOS releases for a device end when the official Android support ends because they don’t support hardware where the firmware is not updated anymore. Or did that change recently?

            • SomeBoyo@feddit.de
              link
              fedilink
              arrow-up
              2
              ·
              1 year ago

              I’m referring to “… and a minimum 5 year guarantee from launch for full security updates and other improvements”, from their FAQ.

              • Mnmalst@kbin.social
                link
                fedilink
                arrow-up
                5
                ·
                1 year ago

                @SomeBoyo Yeah that’s the normal devices guarantee you also get with normal android on pixel devices. So in terms of longevity GrapheneOS doesn’t offer any advantages. There are other advantages of course.

      • zwekihoyy
        link
        fedilink
        arrow-up
        2
        ·
        1 year ago

        that’s fair I suppose, I wasn’t saying not to use it, just that it is worth noting. these strict security policies are what makes mobile platforms much more secure than desktop platforms. I typically use my phone for security sensitive tasks because of this, so I tend to care a lot more about this stuff. if you have any banking info or password managers stored on the device, be careful.

        I’ll admit, it is pretty unlikely anything to happen, though. always just better knowing.