In a document detailing several mobile device best practices, the NSA
recommends users turn their devices off and then back on once every week to
protect against zero-click exploits, which attackers often use to eavesdrop
on and collect data from phones.

https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
Does this advice hold true for PC's also?

On 2024-05-31 14:20, Larry Wolff wrote:
> In a document detailing several mobile device best practices, the NSA
> recommends users turn their devices off and then back on once every week to
> protect against zero-click exploits, which attackers often use to eavesdrop
> on and collect data from phones.
>
> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
> Does this advice hold true for PC's also?

Got any proof that document was created by the NSA?

On 5/31/2024 5:20 PM, Larry Wolff wrote:
> In a document detailing several mobile device best practices, the NSA
> recommends users turn their devices off and then back on once every week to
> protect against zero-click exploits, which attackers often use to eavesdrop
> on and collect data from phones.
>
> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
> Does this advice hold true for PC's also?

https://www.forbes.com/sites/daveywinder/2024/05/31/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/?sh=6b10c53e7c75

"Users can mitigate the threat of spear-phishing, which can lead
to the installation of yet more malware and spyware, by the same
simple action. However, the NSA document does warn that the
turn it off and on again advice will only sometimes prevent
these attacks from being successful.
"

I wasn't feeling very safe today, but now, after a few simple
ritual sacrifices, everything is OK again.

I'm glad this was explained so ordinary users can follow the logic.

I thought we only went "spear-phishing" on dive trip.

*******

For those users at home, wishing to ritual sacrifice, the steps are:

1) Select "Shutdown" from the power menu in your OS.
2) When the fans stop, switch off at the back. If the machine
has no switch, you could unplug the power cable leading to the
ATX supply.
3) Wait at least 60 seconds (inrush limiter cools off etc...) .
4) Plug in, turn on power switch at the back.
5) Push the button on the front and do a normal bootup sequence
like you do every morning or whatever.

Have the evil spirits left the room ?

I would need a psi meter to check.

Maybe a little cleansing with DISM and SFC would help.
Or a Repair Install. I did a Repair Install on my laptop yesterday,
and as a bonus, the thing put my WinRE on the wrong partition :-)
(I had to hunt around to verify that, as I couldn't believe what
I was seeing, but it really was on the wrong partition.)
Then 5034441 installed itself without a fuss (still on the wrong partition
of course). It ignored the partition I provided for it.

That's proof I enjoy a ritual just as much as the next user.

Paul

Am 31.05.24 um 23:20 schrieb Larry Wolff:
> In a document detailing several mobile device best practices, the NSA
> recommends users turn their devices off and then back on once every week to
> protect against zero-click exploits, which attackers often use to eavesdrop
> on and collect data from phones.
>
> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
> Does this advice hold true for PC's also?

A cellphone is nothing else than a desktop machine or laptop: A
computer. If it is correct which I doubt the answer is yes.

The link does not load on my Mac/Firefox. Is this a trustworthy site?
Even if I allow Java-script.

--
"Gutta cavat lapidem." (Ovid)

On 2024-05-31 23:27:42 +0000, Paul said:
> On 5/31/2024 5:20 PM, Larry Wolff wrote:
>> In a document detailing several mobile device best practices, the NSA
>> recommends users turn their devices off and then back on once every week to
>> protect against zero-click exploits, which attackers often use to eavesdrop
>> on and collect data from phones.
>>
>> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
>>
>> Does this advice hold true for PC's also?
>
> https://www.forbes.com/sites/daveywinder/2024/05/31/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/?sh=6b10c53e7c75
>
>
> "Users can mitigate the threat of spear-phishing, which can lead
> to the installation of yet more malware and spyware, by the same
> simple action. However, the NSA document does warn that the
> turn it off and on again advice will only sometimes prevent
> these attacks from being successful.
> "

Oh dear ... more utter bollocks from the looney conspiracy nutter trolls. :-\

> I wasn't feeling very safe today, but now, after a few simple
> ritual sacrifices, everything is OK again.
>
> I'm glad this was explained so ordinary users can follow the logic.
>
> I thought we only went "spear-phishing" on dive trip.
>
> *******
>
> For those users at home, wishing to ritual sacrifice, the steps are:
>
> 1) Select "Shutdown" from the power menu in your OS.
> 2) When the fans stop, switch off at the back. If the machine
> has no switch, you could unplug the power cable leading to the
> ATX supply.
> 3) Wait at least 60 seconds (inrush limiter cools off etc...) .
> 4) Plug in, turn on power switch at the back.
> 5) Push the button on the front and do a normal bootup sequence
> like you do every morning or whatever.

If you're booting your device every morning, there's no need to follow
this supposed "advice" anyway.

> Have the evil spirits left the room ?
>
> I would need a psi meter to check.
>
> Maybe a little cleansing with DISM and SFC would help.
> Or a Repair Install. I did a Repair Install on my laptop yesterday,
> and as a bonus, the thing put my WinRE on the wrong partition :-)
> (I had to hunt around to verify that, as I couldn't believe what
> I was seeing, but it really was on the wrong partition.)
> Then 5034441 installed itself without a fuss (still on the wrong partition
> of course). It ignored the partition I provided for it.
>
> That's proof I enjoy a ritual just as much as the next user.
>
> Paul

Alan <nuh-uh@nope.com> writes:

> On 2024-05-31 14:20, Larry Wolff wrote:
>> In a document detailing several mobile device best practices, the NSA
>> recommends users turn their devices off and then back on once every week to
>> protect against zero-click exploits, which attackers often use to eavesdrop
>> on and collect data from phones.
>> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
>> Does this advice hold true for PC's also?
>
> Got any proof that document was created by the NSA?

Whether it is or not from NSA, it is good advice I think, as when you
reboot the phone only authorised apps are permitted to run so any
malicious background tasks which have managed to sneak in will be
removed. Also it will clear cached data.

Larry Wolff <larrywolff@larrywolff.net> wrote:
> In a document detailing several mobile device best practices, the NSA
> recommends users turn their devices off and then back on once every week to
> protect against zero-click exploits, which attackers often use to eavesdrop
> on and collect data from phones.
>
> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
> Does this advice hold true for PC's also?

My work tried to enforce this a few months ago. It was stopped pretty
quickly due to all the complaints.

On 5/31/2024 5:20 PM, Larry Wolff wrote:
> In a document detailing several mobile device best practices, the NSA
> recommends users turn their devices off and then back on once every week to
> protect against zero-click exploits, which attackers often use to eavesdrop
> on and collect data from phones.
>
> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
> Does this advice hold true for PC's also?
>

Interesting link. You're concerned about security, yet you're spreading
a link that goes to pure, indecipherable javascript. That link could be
doing anything. You could have protected people from that risk. The
actual PDF is here:

https://s3.documentcloud.org/documents/21018353/nsa-mobile-device-best-practices.pdf

And PDFs should be read with a PDF viewer that either can't handle
script (like Sumatra) or with script clearly disabled. As Alan pointed
out, there's
really no clear indication of who posted this. It could be an attack,
via the
webpage, the PDF, or both. The first step for any kind of reasonable
security
is to block javascript online by default and only enable it as necessary.

To put it in perspective, it's like you've left your front door open and
called all your neighbors to discuss break-ins in the neighborhood. You're
all going to meet down at the local park. You've all left your front doors
open. And you don't see the connection.

On a computer, nearly all vulnerabilities will involve either
javascript or
trickery. The former is executable code attacks. The latter is like when
someone convinces you to give them your credit card number under false
pretenses.

If the NSA really published that PDF then I suspect it was distributed
to employees who've had extensive training in security. The PDF is nonsense
gibberish to the average person. Virtually no one would be willing to follow
the recommendations because people who use cellphones use them constantly
for a vast number of conveniences. They never turn them off, care little
about
how many apps are spying on them, and don't want to have to understand it
all. Just as you visited a pure-script webpage without a second thought.

A cellphone is tracking your location constantly when turned on. Google
even makes money on that data. They call it geofencing. A large percentage
of apps -- whether from official stores or not -- will sell your
personal data.
These are not malware. They're free apps that no one wants to pay for. So
the developer gets paid by selling you out. Most other apps are still
commercial
and will likely need to collect personal data, as well as perhaps credit
card numbers.
Those databases are hacked a great deal. Just the other day someone was
claiming to be selling 1/2 billion personal records from Ticketmaster. I
rarely
use credit cards and normally keep my cellphone turned off unless using it,
yet someone tried to get a credit card in my name last month. They were only
stopped because I have my credit frozen.

Long story short, this kind of advice is like what Paul was saying.
It's mostly
meaningless incantations hoping to avoid calamity, but not trying to
understand
the systems. And the systems are becoming increasingly difficult to
understand.

The fact that documentcloud routinely publishes webpages of pure script
is a typical sign of the times. They're asking you to trust them in running
software on your computer. They have no defensible reason to do such a
thing.
Their pages should be straight, safe HTML. But most people don't know
the difference. Cellphones are even worse in terms of external entities
controlling
what happens on your phone. All devices are gradually becoing kiosk
devices --
where you access services without any control over what runs on the device.

I shut down my computer every night. Why not? Why leave it running for no
reason? Because you can't wait 20 seconds for it to boot? If you never turn
off your cellphone then you ARE being tracked like animals who've been
tagged
by busybody biologists. If you use apps then you're compromising privacy
and
possibly security. But even without apps, Google and Apple are among the
sleaziest
companies operating. Both spy. Both run their own ad networks that depend
on spying. You're trusting your life to a flim flam man and then wondering
whether there's any risk. And you don't know who Google and Apple are
sharing with. The only good part is that both companies are monstrously
greedy and exploitive. They both have good reason to keep their spying to
themselves so that they can get paid by entities wanting to run targetted
ads. Cellphone app makers sell your data to data wholesalers. Google and
Apple directly exploit it themselves.

If you really want security, disable script as much as possible. Don't
bank online. Avoid using a credit card online as much as possible, freeze
your credit records. (Look it up. It's not hard to do.) Don't use credit
cards in public machines, like gas station pumps... If your device doesn't
hold exploitable information then you're not likely to be exploited.

If you want to text friends regularly, call an Uber, bank and shop
online....
then get used to the fact that security and privacy are out the window. You
can't have it both ways. The only people who are going to follow the NSA
advice are NSA employees using an NSA cellphone.... while they live
recklessly
on their own cellphone. That's not meant to be cynical. It's just the facts.
Cellphones are all about convenience and services. It's a comprehensive
lifestyle. It's all but impossible to do it halfway. Personally I only
use my
cellphone for phonecalls away from home. I don't give out the number.
(I don't even know the number.) I don't normally leave it turned on. But
most people don't even turn off their cellphone overnight. Most people
are using apps constantly. Form ost people their cellpphone is the
cockpit of
their lifestyle. In that context, turning it off briefly once a week is
meaningless.
With computers, not turning them off when you won't be using them is simply
stupidity and laziness. And turning them off can sometimes make a difference
in terms of software stuck in memory, updates that require a reboot,
etc. For
example, occasionally a program might get its window closed without
being shut
down. If you don't track such things and you never shut down, when will the
program be closed? Maybe next Christmas? Maybe when you buy a new computer?
A running computer OS is a dynamic, complex process. It's not like
leaving an
electric clock turned on.

Alan wrote:

> Larry Wolff wrote:
>
>> the NSA recommends users turn their devices off and then back on
>> once every week
>>
>> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
>
> Got any proof that document was created by the NSA?

Here it is from a .gov site

<https://media.defense.gov/2021/Sep/16/2002855921/-1/-1/0/MOBILE_DEVICE_BEST_PRACTICES_FINAL_V3%20-%20COPY.PDF>

Newyana2 wrote:

> That link could be doing anything.

Well, any link can do anything ...

> You could have protected people from that risk. The actual PDF is
> here:
>
> https://s3.documentcloud.org/documents/21018353/nsa-mobile-device-best-practices.pdf

That's just a different link to the same site, I posted a link to the
original file (which could also do anything) but presumably you accept a
DoD website is less likely to do anything "bad" than a .org website?

On 6/1/2024 9:24 AM, Andy Burns wrote:

>> That link could be doing anything.
>
> Well, any link can do anything ...
>
No, any link cannot do anything. If you disable script there's very
little chance of any kind of risk. If sites don't require script then one
doesn't need to enable it. A webpage that's really only script (like
the link posted) requires allowing script to run in order to see the
webpage.

>> You could have protected people from that risk. The actual PDF is
>> here:
>>
>> https://s3.documentcloud.org/documents/21018353/nsa-mobile-device-best-practices.pdf
>>
>
> That's just a different link to the same site

No it isn't. The original link is to the webpage that runs script.
This link is directly to the PDF download. It might look the same
to you if you allow PDFs to open in the browser. That's not a good
idea, as PDFs can embed script.

> I posted a link to the
> original file (which could also do anything) but presumably you accept a
> DoD website is less likely to do anything "bad" than a .org website?

You seem to be confused by allowing PDFs to load as webpages.
There was the original webpage. HTML loading script. There's my direct
link to a PDF. There's your link to a PDF. A webpage and a PDF are not
the same. But they might appear to be the same if you allow PDFs to
load in your browser.

If you download a PDF it's reasonably safe to read in something
like Sumatra that doesn't allow script. The webpage, by contrast, is
loading a complex script. I don't allow PDFs in my browser, but that
webpage is somehow loading it, or loading an HTML facsimile. The link
to download the PDF, however, is a real PDF.

I'd suggest that if you care about security online then you might
want to go into your browser settings and change the default behavior
for PDF files -- set them to be downloaded.

On 6/1/2024 10:37 AM, Newyana2 wrote:

> I'd suggest that if you care about security online then you might
> want to go into your browser settings and change the default behavior
> for PDF files -- set them to be downloaded.

It's in all the major papers so there's no need, really, for the PDF.
https://www.forbes.com/sites/daveywinder/2024/06/01/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/

Newyana2 wrote:
> The original link is to the webpage that runs script.
And did you know that was what is was going to do, before you clicked
it? No, but you clicked anyway.
> This link is directly to the PDF download. It might look the same
> to you if you allow PDFs to open in the browser. That's not a good
> idea, as PDFs can embed script.
I do not allow PDFs to load in the browser.
>> I posted a link to the original file (which could also do anything)
>> but presumably you accept a DoD website is less likely to do anything
>> "bad" than a .org website?
>
>   You seem to be confused by allowing PDFs to load as webpages.
You guessed wrong.
> There was the original webpage. HTML loading script. There's my direct
> link to a PDF.
You think just because a URL ends in .pdf, the webserver is certain to
send you a PDF?
> There's your link to a PDF. A webpage and a PDF are not
> the same. But they might appear to be the same if you allow PDFs to
> load in your browser.
Which I don't.

On 6/1/2024 11:11 AM, Larry Wolff wrote:

> It's in all the major papers so there's no need, really, for the PDF.
> https://www.forbes.com/sites/daveywinder/2024/06/01/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/
>

And it's useless info. The NSA have come out with recommendations
that no one would implement, very few can understand, and the mainstream
media have provided a useless takeaway: Everyone can now feel like
they've dealt with security if they just turn their cellphone off once a
week.

What has spearphishing got to do with turning off a cellphone? No one
seems to explain that. Spearphishing refers to tricking people, usually
with convincing info, into taking action that puts them at risk. For
example, someone could send me an email that appears to come from
my bank, getting me to log into a malware site and possibly give up
sensitive info. Rebooting a cellphone would have no effect there.

Newyana2 wrote:

> Larry Wolff wrote:
>
>> https://www.forbes.com/sites/daveywinder/2024/06/01/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/
>
> And it's useless info.
Agreed; it's the equivalent of people thinking that because they check
their tyre pressures once a week, they can drive anyhow they like ...

On 5/31/24 2:20 PM, Larry Wolff wrote:
> In a document detailing several mobile device best practices, the NSA
> recommends users turn their devices off and then back on once every week to
> protect against zero-click exploits, which attackers often use to eavesdrop
> on and collect data from phones.

So since I always turn my phone and computer off (along with the lights,
TV, radio...) when I go to bed I should be safe, right?

> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
> Does this advice hold true for PC's also?

Shouldn't such an article be linked to the NSA website?

--
Cheers, Bev
Q. What's the difference between Batman and Bill Gates?
A. When Batman fought the Penguin, he won.
-- J. Levine

Andy Burns <usenet@andyburns.uk> writes:

> Newyana2 wrote:
>
>> Larry Wolff wrote:
>>
>>>
>> https://www.forbes.com/sites/daveywinder/2024/06/01/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/
>> And it's useless info. > Agreed; it's the equivalent of people
>> thinking that because they check their > tyre pressures once a week,
>> they can drive anyhow they like ...

Why would anyone think that? The news article says "However, the NSA
document does warn that the turn it off and on again advice will only
sometimes prevent these attacks from being successful."

It's good advice, but it won't safe you from everything, it's a
mitigation, that's what it says in the article.

On Sat, 01 Jun 2024 20:15:37 +0100, Richmond wrote:
>>> https://www.forbes.com/sites/daveywinder/2024/06/01/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/
>>> And it's useless info.
> Agreed; it's the equivalent of people
>>> thinking that because they check their
> tyre pressures once a week,
>>> they can drive anyhow they like ...
>
> Why would anyone think that? The news article says "However, the NSA
> document does warn that the turn it off and on again advice will only
> sometimes prevent these attacks from being successful."
>
> It's good advice, but it won't safe you from everything, it's a
> mitigation, that's what it says in the article.

The news article says "The NSA also advises Phone users to disable
Bluetooth when not using it" but isn't Google and Apple keeping the
bluetooth radio permanently on because they want to sell trackers?

In addition to disallowing you to keep your bluetooth radio off, isn't
Apple and Google not really turning off the phone even when you tell it to
turn off?

With Android 15, for example, the bluetooth radio can't be turned off for
more than one day, and with the latest Pixel phones, they never turn off.

I've heard Apple's doing the same two things, aren't they?

On 6/1/2024 3:15 PM, Richmond wrote:
>
> Why would anyone think that? The news article says "However, the NSA
> document does warn that the turn it off and on again advice will only
> sometimes prevent these attacks from being successful."
>

Do you know how that's so? I didn't see any version of this news
that explained the claim. Spearphishing has nothing to do with
resident malware. And the rest of the advice is mostly things
that few understand and fewer would do.

I'm all for better security on cellphones, but to my mind this
is just an example of how the mainstream media feeds the public
any old clickbait, but avoids actually printing useful information.
If they did then no one would read their stuff. That's why they're
the *mainstream* media. This case was a perfect example.
Forbes took a half-baked, entirely unexplained graphic from
the NSA -- probably intended for agents -- and reduced it to
"NSA Warns iPhone And Android Users To Turn It Off And On Again".

People read that and, like you, think they've learned how to
protect their phone from attacks with a nearly effortless trick.
It's like the way that privacy articles always tell us to delete
cookies once in awhile. That advice is not wrong, but it misleads
people into thinking they understand the issue when they really
don't.

In comp.mobile.android, on Sat, 1 Jun 2024 14:18:49 +0100, Andy Burns
<usenet@andyburns.uk> wrote:

>
>Alan wrote:
>
>> Larry Wolff wrote:
>>
>>> the NSA recommends users turn their devices off and then back on
>>> once every week
>>>
>>> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
>>
>> Got any proof that document was created by the NSA?
>
>Here it is from a .gov site
>
><https://media.defense.gov/2021/Sep/16/2002855921/-1/-1/0/MOBILE_DEVICE_BEST_PRACTICES_FINAL_V3%20-%20COPY.PDF>

very intesting. Especially:

Unexpected pop-ups like [the one shown] are
usually malicious. If one appears,
forcibly close all applications
(i.e., iPhone®2: double tap the
Home button* or Android®3:
click “recent apps” soft key

I guess Android®3 is from long ago, but perhaps it's still true, that
tapping the “recent apps” soft key will close all applications!!! ?????

And the “recent apps” soft key is the square symbol at the bottom, is
that right?

In comp.mobile.android, on Sat, 1 Jun 2024 18:39:05 +1200, Your Name
<YourName@YourISP.com> wrote:

>On 2024-05-31 23:27:42 +0000, Paul said:
>> On 5/31/2024 5:20 PM, Larry Wolff wrote:
>>> In a document detailing several mobile device best practices, the NSA
>>> recommends users turn their devices off and then back on once every week to
>>> protect against zero-click exploits, which attackers often use to eavesdrop
>>> on and collect data from phones.
>>>
>>> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
>>>
>>> Does this advice hold true for PC's also?
>>
>> https://www.forbes.com/sites/daveywinder/2024/05/31/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/?sh=6b10c53e7c75
>>
>>
>> "Users can mitigate the threat of spear-phishing, which can lead
>> to the installation of yet more malware and spyware, by the same
>> simple action. However, the NSA document does warn that the
>> turn it off and on again advice will only sometimes prevent
>> these attacks from being successful.
>> "
>
>Oh dear ... more utter bollocks from the looney conspiracy nutter trolls. :-\

You do know that the NSA does a lot of the US's spying, and they are
also spied upon a lot. Do you think they don't a lot about spying?

Next time you're in Maryland, you can go to the NSA Museum.
>
>
>> I wasn't feeling very safe today, but now, after a few simple
>> ritual sacrifices, everything is OK again.
>>
>> I'm glad this was explained so ordinary users can follow the logic.
>>
>> I thought we only went "spear-phishing" on dive trip.
>>
>> *******
>>
>> For those users at home, wishing to ritual sacrifice, the steps are:
>>
>> 1) Select "Shutdown" from the power menu in your OS.
>> 2) When the fans stop, switch off at the back. If the machine
>> has no switch, you could unplug the power cable leading to the
>> ATX supply.
>> 3) Wait at least 60 seconds (inrush limiter cools off etc...) .
>> 4) Plug in, turn on power switch at the back.
>> 5) Push the button on the front and do a normal bootup sequence
>> like you do every morning or whatever.
>
>If you're booting your device every morning, there's no need to follow
>this supposed "advice" anyway.
>
>
>
>
>> Have the evil spirits left the room ?
>>
>> I would need a psi meter to check.
>>
>> Maybe a little cleansing with DISM and SFC would help.
>> Or a Repair Install. I did a Repair Install on my laptop yesterday,
>> and as a bonus, the thing put my WinRE on the wrong partition :-)
>> (I had to hunt around to verify that, as I couldn't believe what
>> I was seeing, but it really was on the wrong partition.)
>> Then 5034441 installed itself without a fuss (still on the wrong partition
>> of course). It ignored the partition I provided for it.
>>
>> That's proof I enjoy a ritual just as much as the next user.
>>
>> Paul
>

In comp.mobile.android, on Sat, 1 Jun 2024 08:05:03 +0200, Jörg Lorenz
<hugybear@gmx.net> wrote:

>Am 31.05.24 um 23:20 schrieb Larry Wolff:
>> In a document detailing several mobile device best practices, the NSA
>> recommends users turn their devices off and then back on once every week to
>> protect against zero-click exploits, which attackers often use to eavesdrop
>> on and collect data from phones.
>>
>> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
>> Does this advice hold true for PC's also?
>
>A cellphone is nothing else than a desktop machine or laptop: A

I was going to point out that Android has many and major differences
from Windows, but that would just lead to a fight, so I won't say
anything.

>computer. If it is correct which I doubt the answer is yes.
>
>The link does not load on my Mac/Firefox. Is this a trustworthy site?

>Even if I allow Java-script.

Am 02.06.24 um 06:06 schrieb micky:
> In comp.mobile.android, on Sat, 1 Jun 2024 08:05:03 +0200, Jörg Lorenz
> <hugybear@gmx.net> wrote:
>> A cellphone is nothing else than a desktop machine or laptop: A
>
> I was going to point out that Android has many and major differences
> from Windows, but that would just lead to a fight, so I won't say
> anything.

The only *relevant* difference is that Android runs apps in sandboxes
that require elevated rights. And who cares about Windows?

BTW: You are not knowing much about the devices you use and now you want
to brag? Hint: You cannot solve your social issues with a cellphone.

*ROTFLSTC*

--
"Gutta cavat lapidem." (Ovid)

Am 02.06.24 um 06:03 schrieb micky:
> In comp.mobile.android, on Sat, 1 Jun 2024 18:39:05 +1200, Your Name
> <YourName@YourISP.com> wrote:
>
>> On 2024-05-31 23:27:42 +0000, Paul said:
>>> On 5/31/2024 5:20 PM, Larry Wolff wrote:
>>>> In a document detailing several mobile device best practices, the NSA
>>>> recommends users turn their devices off and then back on once every week to
>>>> protect against zero-click exploits, which attackers often use to eavesdrop
>>>> on and collect data from phones.
>>>>
>>>> https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices
>>>>
>>>> Does this advice hold true for PC's also?
>>>
>>> https://www.forbes.com/sites/daveywinder/2024/05/31/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/?sh=6b10c53e7c75
>>>
>>>
>>> "Users can mitigate the threat of spear-phishing, which can lead
>>> to the installation of yet more malware and spyware, by the same
>>> simple action. However, the NSA document does warn that the
>>> turn it off and on again advice will only sometimes prevent
>>> these attacks from being successful.
>>> "
>>
>> Oh dear ... more utter bollocks from the looney conspiracy nutter trolls. :-\
>
> You do know that the NSA does a lot of the US's spying, and they are
> also spied upon a lot. Do you think they don't a lot about spying?
>
> Next time you're in Maryland, you can go to the NSA Museum.

My goodness! You are naive!

--
"Gutta cavat lapidem." (Ovid)

On 6/1/24 4:23 PM, Peter wrote:
> On Sat, 01 Jun 2024 20:15:37 +0100, Richmond wrote:
>>>> https://www.forbes.com/sites/daveywinder/2024/06/01/nsa-warns-iphone--android-users-to-turn-it-off-and-on-again/
>>>> And it's useless info.
>> Agreed; it's the equivalent of people
>>>> thinking that because they check their
>> tyre pressures once a week,
>>>> they can drive anyhow they like ...
>>
>> Why would anyone think that? The news article says "However, the NSA
>> document does warn that the turn it off and on again advice will only
>> sometimes prevent these attacks from being successful."
>>
>> It's good advice, but it won't safe you from everything, it's a
>> mitigation, that's what it says in the article.
>
> The news article says "The NSA also advises Phone users to disable
> Bluetooth when not using it" but isn't Google and Apple keeping the
> bluetooth radio permanently on because they want to sell trackers?

Why would a radio be bluetooth? Does anyone actually use separate
radios now? And if they did, why would they want it to play through
their phone? Or is it the radio on the phone playing through bluetooth
speakers?

> In addition to disallowing you to keep your bluetooth radio off, isn't
> Apple and Google not really turning off the phone even when you tell it to
> turn off?
>
> With Android 15, for example, the bluetooth radio can't be turned off for
> more than one day, and with the latest Pixel phones, they never turn off.

Seriously? Why would anyone want to be forced to have a radio even if
they weren't actually listening to it? I once tried to listen to the
radio on my Pixel 2, found it unpleasant (really inadequate speaker(s))
and had to spend quite a bit of time figuring out how to turn it off.
Why would anybody tolerate using the battery for an app they weren't
using and didn't wane?

> I've heard Apple's doing the same two things, aren't they?
>

--
Cheers, Bev
"We returned the General to El Salvador, or maybe Guatemala,
it's difficult to tell from 10,000 feet." -- Anon.