Which Phone Do you Use? Why?

[GTP]

You can use these dolls to show us what happened if that's easier.

hahahahah rotflmao.

 

[frase]

Android S8 here, dont keep uptodate with latest and greatest. Still works, is fine with me. Android as easier and cheaper to repair, I do this myself. I do not like Apple never have, each to their own.

Easier to use than going through 5 different routes just to get the stupid things to do 1 task. New Apple phone we added another camera..whoop de do are we spiders how many cameras does one need.

 

[Sky-Knight]

If you care about security at all... you've only got two phone lines you can buy from...

Pixel and iPhone.

Literally anything else, and you're just asking for trouble. Unless you jailbreak the thing and do your own OS on it. Samsung and the rest just don't patch enough.

For my part, I'm currently on a Pixel 3a, and I love the thing. All the features I need, no useless fluff, in a package cheap enough I could get two of the things brand new, the month Google released them, with Otter Boxes for $1000.

https://www.amazon.com/Google-Pixel-Memory-Phone-Unlocked/dp/B07R7DY911

I've had two on Verizon for a year now, will not give them up. Price has actually gone up a fair bit, I only gave $300 a pop for them a year ago.

It will be a cold day on Satan's doorstep before I ever fork over $1000+ for a PHONE.

 

[britechguy]

Samsung and the rest just don't patch enough.

Serious and no-snark-intended question: What, to you, constitutes "enough"?

How frequent should those patches be, and what rises to the level of needing to be patched ASAP in your view?

 

[Sky-Knight]

Serious and no-snark-intended question: What, to you, constitutes "enough"?

How frequent should those patches be, and what rises to the level of needing to be patched ASAP in your view?

At least monthly, Google issues security updates for Android at a minimum once a quarter, more frequently if required. But here's the rub... if you aren't on a Pixel device... YOU DON'T HAVE THEM.

Which means most android endpoints can be pwned with a text message. They are NOT safe to use!

 

[britechguy]

@Sky-Knight,

Your security requirements are far more stringent than mine are, that's for sure.

I've been using Android devices for years without incident, and constantly use mine for making mobile deposits, and have no intention of changing that practice.

You seem to be focusing on the remotely possible than the reasonably probable when it comes to Android security.

 

[Sky-Knight]

@britechguy There are times that I really just want to slap you, because you're far too intelligent to be this dumb. That comment the digital equivalent of not wearing a mask in public.

https://www.cvedetails.com/product/19997/Google-Android.html?vendor_id=1224

414 issues in 2019, was your phone patched?

Software has bugs, Internet connected software needs updates, this is a fact of life. Doesn't matter what the OS is, it's the same. Your perception that Android is somehow magically safer than Windows is dangerous. You wouldn't accept a Microsoft platform to not be patched, for the exact same reasons you shouldn't accept Android be any different.

And, you know... for comparison...

https://www.cvedetails.com/product/32238/Microsoft-Windows-10.html?vendor_id=26

Windows 10 had fewer vulnerabilities discovered in 2019 than Android did. But that isn't quite fair, because that includes all versions of Android. Android 10 is here: https://www.cvedetails.com/version/333544/Google-Android-10.0.html

266 issues for 2019, basically in the same ball park as Windows 10.

Android 9 was far safer for that calendar year: https://www.cvedetails.com/version/269726/Google-Android-9.html

8 didn't fair quite as well... https://www.cvedetails.com/version/223494/Google-Android-8.0.html

But Android 8 released in 2017, if you never got a security update... which many Samsung devices specifically didn't... they're still wide open to all sorts of remotely exploitable conditions.

Google produces these updates, it's the phone manufacturers and cellular companies that fail to deliver them. Which is why you're stuck buying Pixel, because Google supports it directly, just like Apple does with iPhone.

 

[britechguy]

My phone is patched, typically about quarterly. My Android security patch level is currently noted as 2020-05-05. It is my presumption, at all times and for all operating systems, that one is talking about having appropriate, and recent, security patches in place. My Samsung S7 did security patches with some frequency and the Xiaomi devices seem to be even more frequent. If a version of Android is out of support it should not be used as a "daily driver" just like one would not use a Windows XP machine as a "daily driver" in contact with cyberspace and doing the activities one expects with a "daily driver."

Feel free to slap me if you so choose. One can be far too anal retentive about security. I'm careful, but no more careful than I need to be.

I don't believe I am either cavalier nor that I lead some sort of "charmed life." But years and years and years of doing the same things, without incident, clearly indicates that they have some merit.

And, contrary to many assertions I've read on this forum, I have found that banks and credit card companies tend to be very, very concerned that the security on devices be "strong enough" to prevent most fraud.

 

[Sky-Knight]

If your phone is patched! GREAT!

I've seen so many that aren't. Your phone is only a month older in patch level than mine is, which is probably about as current as Samsung ever got. That's a bucket better than any of my Samsung devices ever were.

That actually makes me feel better, Google spent a ton of money trying to force vendors to get off their collective carcasses, perhaps it worked and I can stop thinking about it.

 

[NETWizz]

I have the Nokia 4.2, and it runs Android One supported by Google who made it for Nokia. Overall, it is far better than Some more expensive phones, but it is not as good as the Pixel.

Some are bad like Motorola and LG

https://www.androidpolice.com/2020/07/08/android-phone-security-update-tracker/

 

[NETWizz]

I get phones given to me all the time so I'm currently using a Samsung S9.

I use it to make /receive calls, send/receive texts, take the occasional photo and play Pokemon Go.
I have it firewalled, run Emsisoft Mobile Security and JottaCloud and everything that can be disabled is disabled or blocked by the firewall.
Any other use I'm not interested in.

I also have a Samsung S6, firewalled, EMS, and everything disabled. I dont use it for anything other than Pokemon Go. No calls. No messages.

Email? Internet? Thats why I have a PC.

Edit to add: I would have to be in Hell about to be roasted before I would even consider using an iPhone.

What firewall do you use?

 

[callthatgirl]

I have both and I use my iPhone or day to day. The droid is the spare in case I need a 2nd phone and I use it for testing clients email/Outlook with it. I absolutely hate it though but have to have it. I am on the phone like 6000 minutes a month and if this phone chokes, the droid gets up on deck. I was a Blackberry girl from the get go and had to get an iPhone due to so many of my clients having one.

 

[GTP]

What firewall do you use?

NetGuard version 2.269 (Paid version)

It works very well. 271 "services" blocked 13 allowed.

 

[HCHTech]

The droid is the spare in case I need a 2nd phone and I use it for testing clients email/Outlook with it.

There is something to be said for having both at hand. Every time a customer calls with some problem on their iPhone, I have to struggle through talking them through stuff because I don't use IOS day to day. We've recently started using our remote software to get into customer's phones (can view only, but easier to tell them "Click the button on the top left"). Although talking them through getting the app isn't trivial for a lot of folks....

Is there an IOS emulator website? I should put that on my research list...

Edit: We've also been using the Google Remote (remotedesktop.google.com) extension to remote into Chromebooks, too...

 

[Sky-Knight]

Yeah, because we can't just remote to the things and help them like we can any other computer... because the mobile device market is run by trolls with half a brain.

https://source.android.com/security/bulletin/2020

My patch level is now July 5, 2020

Because Pixel.

And as per... https://source.android.com/security/bulletin/2020-07-01

All the vendors has this patch a month ago, so if your Samsung doesn't have it... well it just made my point for me.

Impacted Android Versions include 8, 8.1, 9. and 10.

https://www.cisecurity.org/advisory...-allow-for-arbitrary-code-execution_2020-091/

But remote code execution that bypasses the sandbox is "meh" right?

P.S., You can't firewall without root. You can flag apps to lose permission to access the Internet, but with it comes to malware it doesn't listen to permissions. Touch the wrong link and splat... The app does have value in controlling other legitimate apps though.

 

[britechguy]

When a security bulletin notes, "There are currently no reports of these vulnerabilities being exploited in the wild," that matters, too.

If one believes that every blessed security bulletin is cause for panic, then, yes, I suppose this one is. I don't believe they're all cause for panic, and it's simply expected that certain vulnerabilities will be found (and eventually patched) on an ongoing basis for every OS. Those patches seldom occur "immediately" or anywhere near to it.

I can still sleep at night, that's for sure, as I am not in the habit of constantly adding or removing apps from my devices and this vulnerability, like most of them, in all probability requires the user to do something to invite the wolf in the door.

If your arsenal includes an Android security suite it's even less likely.

You can complain that I worry way too little. I say you worry way too much.

 

[nlinecomputers]

I have a Pixel 2XL and it is the best phone I've ever owned. The battery is getting old and unfortunately, the phone is going to be EOL come October so I'll either have to root and Rom it or get another phone. I want an unlocked phone that will work on all the networks, dual sim, and clean OS. Looking at OnePlus.

 

[GTP]

There's an app on the Google Play Store called "SnoopSnitch" that gives a detailed analysis of Androids Patch Level.

I also use "LensCap" to block access to the cameras.

 

[Haole Boy]

Pixel 4. Because I wanted a two line (personal and business) phone that has a US warranty. And I wanted a phone that would be updated regularly. Would you be happy with waiting 6 months or more to receive Windows Updates because your brand of PC delays them that long? I had a Samsung that was over a year behind on updates. I see a mention above that Google is trying to improve this, but for now, I'll stick with a Pixel.

In the past, I tried an international Samsung S9 Duo, died after a month, and no recourse. Lost ~ $650 and had to buy yet another phone. This time it was an ASUS that had a 30 day warranty. It lasted a couple of years, and has been replaced by the Pixel.

The Pixel has it's quirks though. Only a single ringtone (so you can't identify which line is ringing without looking at the phone). I can't seem to change the notification sound for texts. and a few other strange things where you just shake your head and ask if they ever looked at other phones for good-to-have features.

<rant>As for anything from Apple, I will NEVER purchase anything from them. If you're asking why then you obviously have never tried to do hardware repairs on their systems that are DESIGNED to be difficult to repair. I do need to purchase a new mac laptop (my 2010 Air can no longer be upgraded), but I will purchase a used one. I will not give any money to Apple.</rant>

Harry Z

 

[Mick]

No phone, none at all. If I'm in the office you can reach me on the landline; if I'm out it's because I'm busy.