@ygor

> Which of these smartphone OSes do you think is more secure currently? For whatever definition of "secure" feels right to you.

isn't it kind of the whole point to have some specific definition here?

personally if I was a journalist or something I would be using an iPhone with lockdown mode (this disables a bunch of potentially risky features around messages, disables JIT entirely - currently only used in apples JS implementation anyway since apps aren't allowed, and does a bunch of other security oriented stuff).

Alternatively something with grapheneOS.

as a relative-nobody who is unlikely to be targeted, you should mostly be concerned with malware/"fly by" attacks or recovering your phone if it's stolen.

@ygor genuinely surprising to see degoogled android up here, ya'll are living in an echo chamber I'm sorry

@ygor your random phone running lineageOS with an unlocked bootloader is free pickings if someone steals it (trivial to wipe since the bootloader is unlocked!) and makes you very vulnerable to an evil maid attack.

grapheneOS is fine because they actually relock the bootloader, arguably these should be separate categories in the poll.

@cas @ygor How do they relock the bootloader?

@penguin42 @ygor android lets you enrol custom signing keys, like efi signing keys more or less

most vendors don't implement it properly and you can easily brick your device though

@cas @ygor Oh, ok - that's nice - and vendors screwing it up is hardly surprising :-)