X-post: Better understanding and mitigating the risks of using a phone that no longer receives system updates - eviltoast

Crosspost of an ongoing thread over at !android@lemdro.id

Some interesting discussions on the trade-off between security and being able to use your aging Android for a little while longer.

  • himazawa@infosec.pub
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    1 year ago

    I believe the risk of running outdated software is super inflated and mediatic, 99% of people would be absolutely fine running a version of Android from 3 years ago or Windows 8.

    That’s the same thing people running windows XP on internet were thinking in 2017.

    Then WannaCry arrived and they got their data encrypted :)

    • kadu@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      4
      ·
      1 year ago

      WannaCry targeted hospitals, businesses and similar machines.

      Your grandma using Android 9 is safe, don’t worry.

      • himazawa@infosec.pub
        link
        fedilink
        English
        arrow-up
        7
        ·
        edit-2
        1 year ago

        WannaCry targeted hospitals, businesses and similar machines.

        WannaCry targeted everything with SMB exposed, blindly.

        Also, you should read more about security through obscurity, the fact that “no one will target you because you are a low-value target” is a false sense of security.