• 2 Posts
  • 2.17K Comments
Joined 3 years ago
cake
Cake day: July 11th, 2023

help-circle






  • Personally I tend to avoid running untrustworthy programs outside of a sandbox or VM.

    what does that mean? are you not running any programs at all? you cannot know just by looking at the name if a program reads such sensitive info. and its not unlikely that some developer figured it would be a good idea to include it in automatic crash reports

    yes, this is sensitive information. its like your fingerprint, you cannot change it. I think its quite obvious. web browsers firefox is fighting to hide more and more that even indirectly could lead to identification. websites can’t read this ID, this is just a comparison.







  • And, honestly, which is the more common question to Google these days: a 10-15 year old NBA meme, or people distraught about supposed friends ghosting them?

    looking at the search results, I would say the NBA meme. who the fuck asks the search engine for life advice? asking the chatbot about that sadly has become kind of natural… but to people the chatbot is the [AI company name] app on their phone.




  • Said software resides in ROM - Read-Only Memory

    even if it is actually in read only memory (it is not in smartphones), that does not matter if a vulnerability grants remote code execution ability. it all happens in RAM. it is wiped with a power cycle but the attacker can just reinfect your phone.

    to the SIM card’s storage - from which it was impossible to run additional apps because, again, that functionality just didn’t exist.

    SIM cards support apps. have been that way for a very long time.

    Finally, most true feature phones didn’t have data connections, making it almost impossible to introduce data into memory.

    calls and sms are data, with a right vulnerability they can be used to deliver a payload

    they could only display an SMS payload as raw text

    same with modern phones, and yet attacks are delivered through them, somehow.


  • A phone from 25 years ago would “stay connected” to the network but idle the modem or even shut down higher functionalities beyond the standard connection ping. A modern phone is CONSTANTLY streaming data. Push notifications. Optimised download of music, syncing of photos, emails, chat messages for your 74 different apps in their different protocols.

    you have lost the point. the point is not all that apps. the question was about the bare minimum needed for voice over 3G/4G. no push notifications, no music streaming, no apps of any kind. calls, and sms

    All of this combined makes a modern 3310 nigh impossible.

    does not. a 3310 was not an entertainment center, and a recreation of it wouldn’t either.

    Or, you can have it, but it’s not a phone worth having, because all it will be able to do is call, send text messages, and maybe have a basic browser built in…

    that’s the whole point