this post was submitted on 31 May 2024
397 points (97.8% liked)

Technology

58970 readers
3804 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 376 points 5 months ago* (last edited 5 months ago) (31 children)

You do it because it makes an attacker’s life harder because now I have to find two bugs instead of one.

The entire boot chain of the phone up to the apps you run are verified successively by the component that loads it. A digital signature helps ensure that only trustworthy code ever runs. A bug must be found to bypass these checks to load malware code. For example, a bug in the image code in a web browser might cause loading of code that isn’t checked. This way the malware gets smuggled onto the phone.

This means that if you get hacked via one bug and malware is loaded, the attacker has to work harder to solve the problem of how do I convince the phone to load it again at boot because the code it’s made of isn’t going to be approved code. When you reboot, you are effectively forcing a validation that all the code you have running is authentic, which would exclude the malware. Trick me once sure, can you survive a full pat down? Probably not. It’ll get caught.

Unless I have a second bug to fool the normal code loading systems too, the malware can’t run. You have to go back and trigger the first bug again somehow, which places more strain on the attacker.

[–] [email protected] 9 points 5 months ago (6 children)

I miss my BlackBerry and it's scheduled reboot option

[–] [email protected] 9 points 5 months ago (5 children)

Pixels with grapheneos can reboot automatically after a number of hours with the screen off (unattended because you are sleeping). But this would also interfere with Whatsapp backup, which happens overnight.

[–] [email protected] 6 points 5 months ago (2 children)

Samsung phones also have a reboot schedule option

[–] [email protected] 1 points 5 months ago (1 children)
[–] [email protected] 3 points 4 months ago (1 children)

Settings > Device care > Auto optimization > Auto restart

[–] [email protected] 1 points 4 months ago
[–] [email protected] 1 points 5 months ago

And in addition to that, they also have automatic reboot if the phone detects performance degradation.

load more comments (2 replies)
load more comments (2 replies)
load more comments (26 replies)