Spyke

"This actually caused some annoyance among law enforcement officials who believed they had suspects' phones stored in a readable state, only to find they were rebooting and becoming harder to access due to this feature."

I love it.

84

Yes, this was the whole goal. Apple is also doing this already because of this

9

That's good, if I don't unlock my phone for 3 days, either the phone is lost or I'm dead.

63
lemm.ee

Good security feature but only for the phone in your pocket. The old one used as a camera, homeassistant screen, sms to email forwarder, ssh server, will stop being useful.

42
Scrollonereply
feddit.it

I hope there will be a way to turn that off, but I'm afraid there won't.

10
lemmy.world

On the 9to5Google article it says

Update 4/16: Google has updated the changelog entry to add that auto-reboot is “optional” when it comes in the “future.” This addresses some concern from people who run continuous Android devices, with tablets somewhat fitting into that.

16

Website: Skynet is dooming the world tomorrow!

Website: Update: You can just tell it not to doom the world if you don't want it. Nothing more to see here. Move on.

Typical.

4

That's why GrapheneOS had this feature for a long time, but with the ability to disable it. It also allows you to set the time period after which the reboot is initiated yourself. You can go as low as 10 minutes, or as high as 72 hours.

6
hefty4871reply
lemmy.ca

The old one isn't getting any updates and won't see this change.

4

The shiny one you have will be old in a few years

2

I had this problem when Apple introduced this feature a year or so ago. I wish Apple had a way to disable it, but such is apple. Now I unlock a phone that lives on my dresser every few days.

-1
sh.itjust.works

I like it but, why so long? If I haven't unlocked my phone in 24 hours I'm either dead or hospitalized, 3 days seems super extreme.

42
aussie.zone

Especially since so many phones won't make it 72 hours without a charge, even if sitting unused.

31

If the screen is off, idk wtd background apps you're running that would drain so much..

3
n2burnsreply
lemmy.ca

3 days seems like a good "default" but I agree I'd definitely like the option to make it shorter.

24

3 days in my opinion is too long imo for a default, if the entire point of it is to increase the security, the default gives 3 days worth of time for an entity to obtain a way to access it via some form of exploit or other means. That's far long enough for most shipping options to send the device elsewhere that may have the appropriate tech to do so.

A 24h limit would significantly decrease the margin for exploitation. I agree the setting should have multiple time intervals though, I just think 3 days is way too long for the purpose of the setting. It seems like a "we wanna do something that sounds good, but won't rock the boat for the powers that be"

2

Because I want my alarm clock to actually work.

8
vrighterreply
discuss.tchncs.de

or maybe, I have replaced it with a newer phone, and repurposed it as some sort of lightweight server or something. So it doesn't get unlocked anymore, ever

4
Pikareply
sh.itjust.works

If that's the case hopefully there will be a setting to disable the feature as a whole as every 3 days would be annoying for a server,

2

honestly I reckon 12 hours would be good enough I only really sleep 6-7 hours and I'll check my phone within half hour at most of waking up usually straight away and I need to watch something relaxing before sleeping so it'll have been used just before I slept so I think 12 hours would be fine and on the super rare maybe I'm awake a super long time for reasons and sleep 12 hours ok the consequence is I have to unlock my phone with a pin instead of my finger and do it twice cause sim lock not that big a deal hell I think 10 hours would be too extreme and would trigger a bit even for me but I reckon it wouldn't that often

1
FauxLivingreply
lemmy.world

You want to do this even with custom roms.

Having your phone automatically go into the BFU state ensures that there's only a small window for a thief to extract data from your phone.

If you ever think your phone is about to be stolen or seized you want to power it off for this exact reason.

22
catloafreply
lemm.ee

They're saying custom ROMs like Grapheneos have had this for a long time already.

29

I read it as "This is a silly Android thing that I don't have to deal with because I use custom roms".

I use Graphene and use this feature, but I can understand why it would seem silly to some people and I can think of use cases where you wouldn't want it to happen (like using your phone as a security device with Haven (https://github.com/guardianproject/haven)) installed.

Most Android users don't understand the BFU/AFU states and the security implications, it is good that default android is including a sane security default that'll be pushed out to the standard Android users.

13
FauxLivingreply
lemmy.world

It is not enough to lock the phone.

An advanced attacker that has access to forensic imaging tools can pull data off of your phone as long as it has been unlocked the first time after boot.

There are some models and some OSs (like Graphene on the newest Pixels) that are safe, for the time being, in AFU mode. You still want to power the phone off if you have the chance.

In your friend's situation, his phone can be powered, isolated from RF to prevent remote wiping and kept in a lock state in order to preserve the keys in memory until an exploit is found for that model. If the OS automatically reboots after 3 days, it prevents this kind of attack.

12

It makes sense for a number of reasons. You could be being detained or your device could be sitting in lost and found.

3

They say their device restarts at 4 am but they don't seem to show how to set it up. On my Note 10 I don't seem to have this feature with stock LineageOS, maybe they're running a modified version of it, like Resurrection Remix

5

Like Apple's devices, Android phones are most secure when they've been freshly rebooted. In this "Before First Unlock" (BFU) state, biometrics and location-based unlocking won't work. The only way to access the device is to use the passcode or PIN. Additionally, all the data stored on the phone is encrypted in the BFU state, making retrieval and snooping much more difficult, even for law enforcement groups that have access to advanced data recovery tools.

8

Settings - Apps - App management - Google Play Services - Disable - Disable App

2

Pixels can be configured to limit charging to 80% these days.

I've started using it and the difference between using 80% and 100% on a daily basis is negligible, I rarely if ever let my device go below about 35% anyway. So this change is basically free battery life for the device

4

Samsung have a setting to set the charger to only charge to a certain amount over night

So if you plug it in at 1800 at 0230 or whatever it won't be charging until just it calculates that it will be full charged when you wake up

1
Dekkiareply
this.doesnotcut.it

Please explain to me how this could be the first step towards something sinister. I absolutely don't see it.

13
Tetragradereply
leminal.space

Day 1: Phone reboots automatically.

Day 4: Obama trans bathroom sex.

Day 10: Mandatory Gay Islam.

3
fanaticus.social

It is my phone.

I don’t want my kids playing with it.

I don’t want the government snooping on it.

I don’t want the CEO of Apple or google making any changes to my property without my consent.

Yet my kids play on my phone despite my objections.

The government snoops

And Tim Cook and google want to remind us it is THEIR PHONE

-11
lemmy.world

Sounds like you're just salty you're incapable of raising your children

7