this post was submitted on 29 Nov 2024
180 points (92.9% liked)
memes
10501 readers
3457 users here now
Community rules
1. Be civil
No trolling, bigotry or other insulting / annoying behaviour
2. No politics
This is non-politics community. For political memes please go to !politicalmemes@lemmy.world
3. No recent reposts
Check for reposts when posting a meme, you can only repost after 1 month
4. No bots
No bots without the express approval of the mods or the admins
5. No Spam/Ads
No advertisements or spam. This is an instance rule and the only way to live.
Sister communities
- !tenforward@lemmy.world : Star Trek memes, chat and shitposts
- !lemmyshitpost@lemmy.world : Lemmy Shitposts, anything and everything goes.
- !linuxmemes@lemmy.world : Linux themed memes
- !comicstrips@lemmy.world : for those who love comic stories.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Always, i refuse to own a device that i cannot control.
it’s a very, VERY bad idea to root your phone
And why's that? I feel im fairly careful with my phone in terms of security. I see no more danger in rooting it than being logged in as admin/root on any of my home computers.
your computers are much less secure in general but they also have different security assumptions
phones are the pinnacle of security in this point in time. rooting them not only breaks but also breaks the security assumptions that apps rely on
for example I can be sure that no other app has access in my data as an app dev. based on that assumption i might store secrets. which on android/iOS is totally fine (there are better ways but ok)
you’d never make such an assumption on a pc app. you’d find another way. there’s no such thing as “my data” on desktop. hence you develop around it
Why? Even Windows has some kind of root out of the box.
and that’s a reason not to use banking or other critical apps from a pc. a mobile is much more secure
rooting also bears the issue of being “not intended”. that means that what you use to get root (for example to manage the root permission) is not as much tested as the rest of the operating system and opens up holes which we don’t know about yet
security is a game of money. as a security researcher, bypassing the sandbox and accessing another apps data, can gain you literally millions
bypassing the root permission on an already rooted phone will gain a pat in the back and a conference talk at best