• Presently42@lemmy.ca
    link
    fedilink
    arrow-up
    7
    arrow-down
    4
    ·
    edit-2
    23 hours ago

    This attitude is, to me, very security through obscurity. I did consider your idea, but on the whole can’t be bothered 🤷

    • aoude@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      15 hours ago

      Can you elaborate on how it’s security through obscurity? I’m just saying what the devs have said. It does make sense though that if you provide root access that it could be easier for malicious devices to gain root access and therefore take more harmful actions

      • Presently42@lemmy.ca
        link
        fedilink
        arrow-up
        2
        ·
        14 hours ago

        Utter hogwash. If I don’t have a device, a hacker can’t gain access to it. That’s security through obscurity. Make things stronger, not evasive

        • aoude@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          7 hours ago

          Not sure what you mean by “if I don’t have a device”? Also I meant malicious apps moreso than malicious devices. If you have root access then if a malicious app gets control there’s basically no restrictions on what it can do given root access.

          Also as far as plain hacking the phone, not through a bad app but through an external device. Pegasus (although probably an unlikely scenario for the average person) can basically hack any smartphone, with the exception of grapheneOS (there were some leaked slides from a meeting a while back that essentially confirmed this).

          You say “make things stronger”, well sandboxing and improved permissions access do make for stronger, more contained systems, and grapheneOS improves on both of those. Root access basically provides a sledgehammer to all of that