Leaving your keys in memory is the weakness that could potentially let authorities into your phone. This could harm people. If your phone has rebooted, and you haven’t logged in yet, there are no keys in memory. That means your data is encrypted at rest.
For the sake of comparison, this was also implemented in iOS 18.
Google has broken trust so often, so severely, that it’s the default to not trust anything they do, ever.
If they can, they absolutely will leverage basic security measures for their own benefit. And, it isn’t like there’s no press by governments to backdoor all the things.
So it shouldn’t boggle the mind at all. This is what happens when oligarchs and their servants run amok, nobody can trust anything.
GrapheneOS offers such an auto-reboot feature (18 hours by default, but the users can set it between 10 minutes and 72 hours), while the iPhone picked up something similar with iOS 18.1 (Inactivity Reboot) last year.
I was referring primarily to things that are known to be good security practices and widely known and used already. Keeping data more secure at rest goes with the “don’t trust anything or anyone” goal, and if not doing it on Android due to said trust or lack thereof, then GrapheneOS offers it too at least.
Leaving your keys in memory is the weakness that could potentially let authorities into your phone. This could harm people. If your phone has rebooted, and you haven’t logged in yet, there are no keys in memory. That means your data is encrypted at rest.
For the sake of comparison, this was also implemented in iOS 18.
Thanks for the voice of sanity. There are so many people freaked out by basic security measures that it boggles the mind.
Google has broken trust so often, so severely, that it’s the default to not trust anything they do, ever.
If they can, they absolutely will leverage basic security measures for their own benefit. And, it isn’t like there’s no press by governments to backdoor all the things.
So it shouldn’t boggle the mind at all. This is what happens when oligarchs and their servants run amok, nobody can trust anything.
I was referring primarily to things that are known to be good security practices and widely known and used already. Keeping data more secure at rest goes with the “don’t trust anything or anyone” goal, and if not doing it on Android due to said trust or lack thereof, then GrapheneOS offers it too at least.
Oh, I get it. I’m looking at switching to graphene despite it needing a Google phone.
I’m just saying that people see Google and changes in an article, it’s not weird for them to immediately assume something hinky is going on