5 ms·

I would gladly use my Pixel 4a (5G) another few years but its support ends in two months [1]. Even though I run GrapheneOS, the open source community is not cap

I would gladly use my Pixel 4a (5G) another few years but its support ends in two months [1]. Even though I run GrapheneOS, the open source community is not capable of maintaining firmware, kernel and vendor code [2]. 1. https://endoflife.date/pixel https://endoflife.date/pixel 2. https://grapheneos.org/faq#legacy-devices https://grapheneos.org/faq#legacy-devices

gameoverhumans 3y ago
I agree it's a shame that Google didn't do a better job with the older Pixel devices. It's worth noting, however, that all of their newer flagships (based on a CPU design they have more control over) have guaranteed security updates for 5 years after release. FWIW I despise Google and do my absolute best to avoid compensating them, but I do think things like their guaranteed security updates are a step in the right direction, and hopefully we can only get further improvements from here.
- aziaziazi 3y ago
  5 years is too short, it means we need to buy at very least 10 brand new phones from 15yo to 60yo (oldies also need security updated right ?). We need a pocket device that do clock, agenda, media player, camera, web browser and obviously phone. Apps are great but can be replaced with on/offline sites. We’re going in a direction that sacrifice users and resources sustainability in favor of the economy. I’m not against economy but it should be a tool to empower humanity, not the opposite.
  - gameoverhumans 3y ago
    Yes, I agree. In my perfect world, a company is legally required to support ALL products they have ever sold, for an unlimited period of time. There would still be warranty periods. But the company would be required to indefinitely continue selling replacement parts, provide repair services (or support third party repair services with manuals, schematics, etc), issue security updates for critical vulnerabilities, etc.
  - EVa5I7bHFq9mnYK 3y ago
    wait, no phones for 70y olds :)?
Springtime 3y ago
Fwiw LineageOS has historically supported various Pixels for many years longer*, eg. the Pixel 2 (2017) which has been updated to Android 13[1]. GrapheneOS on the other hand only supports devices for as long as the manufacturer provides official updates from what I understand. * Subject to of course willing volunteers. [1] https://wiki.lineageos.org/devices/walleye/ https://wiki.lineageos.org/devices/walleye/
- jeroenhd 3y ago
  It should be noted that some security vulnerabilities, such as firmware blobs and binary blob drivers, can't be fixed by LineageOS. Certain Broadcom WiFi chipsets had RCE vulnerabilities in them, for instance, and these devices also run an entirely separate Linux install on the modem chip that rarely receives updates, if ever. While LineageOS can easily extend a phone's lifetime by several years, it's not a real replacement for manufacturer support. I think GrapheneOS's take makes sense, especially for a security-oriented ROM.
  - Springtime 3y ago
    Mmm, for this reason it's worthwhile keeping an eye out for firmware-level issues in case the device is outside the OEM supported range. Eg: CVE-2020-11292[1] which affected Qualcomm chips. [1] https://www.bleepingcomputer.com/news/security/qualcomm-vulnerability-impacts-nearly-40-percent-of-all-mobile-phones/ https://www.bleepingcomputer.com/news/security/qualcomm-vuln...
    - lostmsu 3y ago
      That's still a local privilege escalation type of vulnerability, isn't it?
  - toastercat 3y ago
    Do you know what the attack vector is for exploiting an outdated phone? Asking because I really do not want to get rid of my Pixel 5 in one month.
darkclouds 3y ago
Got rid of mine, they kept being hacked with grapheneOS installed, but even previous samsung android phones were also being hacked. When you are being targetted, you soon find out that these big and small businesses cant save you from criminals.
- Aachen 3y ago
  Have you checked your CO detectors recently?
  - darkclouds 3y ago
    Explain why I should check the CO detectors.
    - Aachen 3y ago
      https://www.reddit.com/r/BestofRedditorUpdates/comments/sajxyf/oop_keeps_finding_postit_notes_in_his_apartment/ https://www.reddit.com/r/BestofRedditorUpdates/comments/sajx... I'd post a teddit or libreddit but 429 https://teddit.net/r/BestofRedditorUpdates/comments/sajxyf/oop_keeps_finding_postit_notes_in_his_apartment/ https://teddit.net/r/BestofRedditorUpdates/comments/sajxyf/o... https://libreddit.acor.is/r/BestofRedditorUpdates/comments/sajxyf/oop_keeps_finding_postit_notes_in_his_apartment/ https://libreddit.acor.is/r/BestofRedditorUpdates/comments/s...
      - darkclouds 3y ago
        tldr
        tonymillion 3y ago
        TL;DR: You might have Carbon Monoxide poisoning which is inducing memory loss and these “hacks” you are experiencing are merely you doing things to yourself that you don’t remember.
rpigab 3y ago
I have no plans to stop using my Pixel 3 running Android.
toastercat 3y ago
> Pixel 5 Updates [...] Ends in 1 month and 2 weeks No way am I getting rid of my Pixel 5 in a month, it still runs like a champ. Can anyone tell me realistically what are the risks of running a phone without security updates? If it's worth anything, I almost exclusively run FOSS apps from F-Droid.
- pacoverdi 3y ago
  Same boat. Feels like I bought my Pixel 5 yesterday and it feels like new, no way I'm going to trash it. It's unlikely I will buy (or recommend) another Pixel if they don't extend the security updates period. Wonder why it is so short: is support that expensive for many models? or simply to force users into unneeded upgrades (F* that).
  - Projectiboga 3y ago
    I got my Pixel 5a based on an erroneous assumption of five years of support, I see EOL for support in 2024, which is only 3 years past release!
aiilns 3y ago
Oh yes, and when support ends it's practically impossible to use a phone. I've never understood people talking about "support", still rocking a 7 year old phone (have changed the battery) with fairly recent lineageos. Only really use floss apps though and don't browse weird sites. I use a computer for serious stuff. If you really cared about waste you could a) not buy a phone with limited support if for some mystical reason you care for that or b) find ways to use the phone without support.

gameoverhumans 3y ago

I agree it's a shame that Google didn't do a better job with the older Pixel devices. It's worth noting, however, that all of their newer flagships (based on a CPU design they have more control over) have guaranteed security updates for 5 years after release. FWIW I despise Google and do my absolute best to avoid compensating them, but I do think things like their guaranteed security updates are a step in the right direction, and hopefully we can only get further improvements from here.

aziaziazi 3y ago
5 years is too short, it means we need to buy at very least 10 brand new phones from 15yo to 60yo (oldies also need security updated right ?). We need a pocket device that do clock, agenda, media player, camera, web browser and obviously phone. Apps are great but can be replaced with on/offline sites. We’re going in a direction that sacrifice users and resources sustainability in favor of the economy. I’m not against economy but it should be a tool to empower humanity, not the opposite.
- gameoverhumans 3y ago
  Yes, I agree. In my perfect world, a company is legally required to support ALL products they have ever sold, for an unlimited period of time. There would still be warranty periods. But the company would be required to indefinitely continue selling replacement parts, provide repair services (or support third party repair services with manuals, schematics, etc), issue security updates for critical vulnerabilities, etc.
- EVa5I7bHFq9mnYK 3y ago
  wait, no phones for 70y olds :)?

Springtime 3y ago

Fwiw LineageOS has historically supported various Pixels for many years longer*, eg. the Pixel 2 (2017) which has been updated to Android 13[1]. GrapheneOS on the other hand only supports devices for as long as the manufacturer provides official updates from what I understand. * Subject to of course willing volunteers. [1] https://wiki.lineageos.org/devices/walleye/ https://wiki.lineageos.org/devices/walleye/

jeroenhd 3y ago
It should be noted that some security vulnerabilities, such as firmware blobs and binary blob drivers, can't be fixed by LineageOS. Certain Broadcom WiFi chipsets had RCE vulnerabilities in them, for instance, and these devices also run an entirely separate Linux install on the modem chip that rarely receives updates, if ever. While LineageOS can easily extend a phone's lifetime by several years, it's not a real replacement for manufacturer support. I think GrapheneOS's take makes sense, especially for a security-oriented ROM.
- Springtime 3y ago
  Mmm, for this reason it's worthwhile keeping an eye out for firmware-level issues in case the device is outside the OEM supported range. Eg: CVE-2020-11292[1] which affected Qualcomm chips. [1] https://www.bleepingcomputer.com/news/security/qualcomm-vulnerability-impacts-nearly-40-percent-of-all-mobile-phones/ https://www.bleepingcomputer.com/news/security/qualcomm-vuln...
  - lostmsu 3y ago
    That's still a local privilege escalation type of vulnerability, isn't it?
- toastercat 3y ago
  Do you know what the attack vector is for exploiting an outdated phone? Asking because I really do not want to get rid of my Pixel 5 in one month.

darkclouds 3y ago

Got rid of mine, they kept being hacked with grapheneOS installed, but even previous samsung android phones were also being hacked. When you are being targetted, you soon find out that these big and small businesses cant save you from criminals.

Aachen 3y ago
Have you checked your CO detectors recently?
- darkclouds 3y ago
  Explain why I should check the CO detectors.
  - Aachen 3y ago
    https://www.reddit.com/r/BestofRedditorUpdates/comments/sajxyf/oop_keeps_finding_postit_notes_in_his_apartment/ https://www.reddit.com/r/BestofRedditorUpdates/comments/sajx... I'd post a teddit or libreddit but 429 https://teddit.net/r/BestofRedditorUpdates/comments/sajxyf/oop_keeps_finding_postit_notes_in_his_apartment/ https://teddit.net/r/BestofRedditorUpdates/comments/sajxyf/o... https://libreddit.acor.is/r/BestofRedditorUpdates/comments/sajxyf/oop_keeps_finding_postit_notes_in_his_apartment/ https://libreddit.acor.is/r/BestofRedditorUpdates/comments/s...
    - darkclouds 3y ago
      tldr
      - tonymillion 3y ago
        TL;DR: You might have Carbon Monoxide poisoning which is inducing memory loss and these “hacks” you are experiencing are merely you doing things to yourself that you don’t remember.

rpigab 3y ago

I have no plans to stop using my Pixel 3 running Android.

toastercat 3y ago

> Pixel 5 Updates [...] Ends in 1 month and 2 weeks No way am I getting rid of my Pixel 5 in a month, it still runs like a champ. Can anyone tell me realistically what are the risks of running a phone without security updates? If it's worth anything, I almost exclusively run FOSS apps from F-Droid.

pacoverdi 3y ago
Same boat. Feels like I bought my Pixel 5 yesterday and it feels like new, no way I'm going to trash it. It's unlikely I will buy (or recommend) another Pixel if they don't extend the security updates period. Wonder why it is so short: is support that expensive for many models? or simply to force users into unneeded upgrades (F* that).
- Projectiboga 3y ago
  I got my Pixel 5a based on an erroneous assumption of five years of support, I see EOL for support in 2024, which is only 3 years past release!

aiilns 3y ago

Oh yes, and when support ends it's practically impossible to use a phone. I've never understood people talking about "support", still rocking a 7 year old phone (have changed the battery) with fairly recent lineageos. Only really use floss apps though and don't browse weird sites. I use a computer for serious stuff. If you really cared about waste you could a) not buy a phone with limited support if for some mystical reason you care for that or b) find ways to use the phone without support.