iPhones Could Still Be Attacked (Even When Powered Off)

In this video I discuss a recently published security paper that explains a potential attack that can be done on iPhones to execute malware on a device even when it is power off
Read the full paper here.
arxiv.org/pdf/...
₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿
Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436
Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV
Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079
Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF
Dash
Xh9PXPEy5RoLJgFDGYCDjrbXdjshMaYerz
Zcash
t1aWtU5SBpxuUWBSwDKy4gTkT2T1ZwtFvrr
Chainlink
0x0f7f21D267d2C9dbae17fd8c20012eFEA3678F14
Bitcoin Cash
qz2st00dtu9e79zrq5wshsgaxsjw299n7c69th8ryp
Etherum Classic
0xeA641e59913960f578ad39A6B4d02051A5556BfC
USD Coin
0x0B045f743A693b225630862a3464B52fefE79FdB
Subscribe to my KZbin channel goo.gl/9U10Wz
and be sure to click that notification bell so you know when new videos are released.

[@dermond]

Now I'm starting to believe that the no removable battery was to prevent turning your phone off definitely

[@kamehameha38]

Its all making sense now

[@StelzCat]

Huh you only figured that out now. Next time you are going to find out why your fitness application wants access to your entire phone functionality.

[@garlet69]

And the $$$

[@notuxnobux]

That has been debunked by snoopes and ADL.

[@kimgkomg]

@@StelzCat it's to figure out how fit you are

[@anxer5544]

I remember when a "hardware kill switch" was just called a "Power off" button...

[@goatsnguns211]

Back in my day

[@yorch802]

@@robertpaulson8790 No bato, así no funciona, cuando no hay potencia nomás no pifa, pero te me cuidas, sale?

[@StuffJason437]

Remember when a hardware kill switch was simply dropping your phone onto the floor, and having the battery fly out.

[@k0lpA]

@@yorch802 Pourquoi repondre dans une autre langue ?

[@yorch802]

@@k0lpA y por qué no?

[@foxyloon]

Anyone who's worked in the ITsec field will know of a thing called the "Security, Functionality, Usability triangle." You can't have a perfectly secure device without sacrificing functionality or usability. That's why I'm not surprised that Apple prioritizes functionality and usability over security with certain features. Stuff like having the "Apple Wallet" Express Card feature work on low battery or while the phone is off. Leaving the radios on so the "Find my" feature works no matter if the phone is on or not. It's way more convenient for the user to be able to use those features unimpeded without having to worry about if the battery still has a charge, or if the phone itself is still on. I'll admit, I'm one of those users that benefits from a such a setup, since I'm the forgetful type that loses things rather easily. It would be a massive hindrance in the event I misplaced my phone, switched off my phone's radios, and forgot to charge it all at once. I wouldn't ever be able to find that phone until several months into the future. Still though, I believe that phone manufacturers should be more willing to cater to the crowd who's willing to sacrifice functionality and usability for security. Even a nag message like "this will hinder x functionality" but allow you to configure your phone accordingly would be a huge boon for the security conscious. "Why not have both?"

[@KZ1994able]

Because you will have a fone wif no options & you will like it

[@egg5474]

Because apple is diametrically apposed to feature creep in their walled garden

[@macktheripper7454]

They only care about money 💰

[@foxyloon]

@@KZ1994able Come back when you're done being hyperbolic.

[@foxyloon]

@@egg5474 That's true to an extent, although I believe that they'd be willing to add certain features if there was enough incentive to do so. Still though, what I propose wouldn't be that difficult to implement. Would be very negligible feature creep if at all.

[@Balance275]

I'll just say that I lived a way happier and blissful life before discovering your channel. Now I feel the urge to wrap tinfoil around my head.

[@HaxxorElite]

Ignorance is bliss

[@MikeOxlong-]

Only because this guys sells said tinfoil hats en masse... 🤦‍♂️

[@justarandomtechpriest1578]

@@MikeOxlong- he's right about a lot of this stuff though

[@Balance275]

@@MikeOxlong- I know that most everyday Joes don't really need to worry about this things, but I was completely unaware about how insecure modern devices are. Cmon, you can't even shut the thing down?

[@facundosoarez]

Fr, this mf got me paranoid lmao

[@Garwinium]

Yeah but to be fair if a hacker has physical access to your device and knows what they are doing, you're pretty much fricked no matter what

[@JordanPlayz158]

Well I don't even think the hacker needs physical access, depending on how the vulnerability works and how quick it is to perform, someone could just have a device that performs the exploit while walking by you in the store or something, bluetooth has like 30 ft of distance iirc so that's quick a big range so I wouldn't say it's equivalent to physical access but yeah, if they do have physical access, then yeah, it's pretty much over either way

[@koekiejam18]

When hacking pretty much everything having physical access is one of the best things to have, topped only by having a „trusted” human at your disposal. (One of the reasons scammers target older „less aware people”) people tend to be a whole lot less infaillable compared to passwords. Hence hacking often involves social skills (ie i pretend to be an employee at your local bank) However that doesnt mean that a lack of physical access brings security, open networks and such can render alot of securities neglicable in an instant. Things like .pdf documents or MP3 files can contain harmful software, or you could even just send a thousand emails claiming that you have pictures of „insert person reading said email” in a particularily compromising position

[@AuxiliaryPanther]

I had a smartphone (galaxy J8) with USB debugging disabled, no usb video capability, voice commands/disabled disabled, no cloud backup, and no fingerprint stored. I dropped it and destroyed the display and touchscreen capabilities. I had to take the phone apart and connect a new touchscreen display in order to do anything and retrieve the files. Security at the cost of convenience.

[@dyamineu5246]

Not really the security flaw is due to a feature of find my device, therefore if a hacker was able to bypass os security measures and install their malware they could replicate it to all iphones that are connected to this feature because these iphones would be interlinked.

[@JordanPlayz158]

@@dyamineu5246 true, they could make a worm and it'd be incredibly effective

[@banu6301]

0:29 actually they didn't refuse to decrypt it. They were asked to add a system to every iphone so that the fbi (or whoever asked them, I dont remember) can decrypt them easier. They refused as this would also help hackers decrypt the phones. If I remember correctly in the end those guys decrypted the phone themselves (brute force or something) and didn't found anything usefull

[@cesims1230]

To add detail they paid an outsource company to do it. Millions on tax payer dollars were used. Also when Apple got brought to court and was told it was “only one iPhone” ended up the feds had over 200 iPhones they wanted open plus a back door access to iPhone.

[@thetechfromheaven]

They made a memory dump with some sort of JTAG tool

[@thomascrabtree]

The Israeli firm the FBI contracted the decryption out to proudly advertise it to help sell their services. Bit shocking that the FBI has to go all the way to Israel to decrypt a convicted terrorists iPhone when we pour billions of USD into the alphabet soup agencies.

[@henrikpersson5420]

Probably hush ordered to decrypt the phone with a later cover story. The illusion of privacy is vital to have the public tell all their deepest darkest secrets to their smart devices. Famously many privacy hardcore software devs have a tos clause which states "we have not been contacted by the government to share data" which gets deleted once they do. As a way to tell you without telling you, because of the hush-orders.

[@macktheripper7454]

It was decrypted by an Israeli company

[@nmnxe]

For the Apple + Security fans out there. A good practice might be to actually pry open the iPhone and take the battery out before doing your top secret work. The laws of physics can’t be broken :)

[@therealb888]

RFID enters the chat 😂

[@fakename7153]

apple products are particularly hard to open, you would be better off just not caring the phone or covering it on tinfoil.

[@unliving_ball_of_gas]

until you realise that RFID works without battery..

[@alfistibrasiliani]

@@unliving_ball_of_gas how's that possible?

[@user-sv6hv6ym1d]

@@alfistibrasiliani There is usually another, small and welded battery in phones and computers, that is meant for such things. Ever wondered why a device, that's been powered-off and battery-less for some time, keeps knowing the current time? That's because of this second battery.

[@helloofthebeach]

This is a great summary of why smartphones are fundamentally untrustworthy devices. Untrustworthy things, like untrustworthy people, can still be valuable and useful. You just need to keep in mind what your risks are and organize your life accordingly.

[@joey199412]

I have just stopped using a smartphone altogether. The only thing I really miss is able to make hotspots for my laptop on the go.

[@threestans9096]

i don’t think that matters much. still can be hacked. just less data to steal.

[@threestans9096]

@our hero no it’s not and go to hell

[@LovePoison23443]

If you dont use your phone that much or you dont rely on any software walled-garden environment and you have some linux experience... I'd suggest you go for the PinePhone. I've been using it as a daily driver for quite a long time now and it is perfect for me. And this one DOES have hardware killswitches... hehe

[@LovePoison23443]

I wouldn't advise you to use the Pro yet. It might have better hardware but it still didn't reach the level of software maturity that the OG PinePhone has. If you want more power wait until you buy one ig

[@kavky]

Use CalyxOS. There's a video on this channel about it. And Fdroid.

[@Finkelfunk]

This was a concept of malware/tracking/hack that had Snowden literally shit bricks for years. And yet again like so many times before he was spot on before any mainstream security professionals were even considering this to be an option.

[@therealb888]

Sources? Seriously though, if you find a source of him saying this, share it. I too remember him warning something along these lines but can't find it.

[@Finkelfunk]

@@therealb888 There is a 23 minute video titled "How your cellphones spy on you" I think from the Joe Rogan podcast where he talks about this and says that this is one of his biggest fears. In the past he's also tweeted about it on several occasions. I also think I remember him mentioning this in "Permanent Record".

[@therealb888]

@@Finkelfunk Thank you! I just had a spooky moment. I type "how your cell" & google just recommends the exact title. I am actually a little stoked right now. F**k me I try the same with tor browser and it's the second suggestion, not the first.

[@Finkelfunk]

@@therealb888 ​ To be fair: What other search results are there? "How your cellphone committed war crimes in Albania"? The question of cellphones spying on you is a fairly common search term in that particular phrase, especially because it is a very actively viewed video. That is why it is the second suggestion in Tor. Search engines can also detect that you are using Tor so what else is someone that is "paranoid" enough to be using Tor gonna search for other than surveillance related topics? The non-Tor search is probably very related to your KZbin-history though, since this too is Google. I would suggest alternative search engines, but my comment has already been deleted 5x because of it. :) Google sure loves competition.

[@lordyhgm9266]

Side note, you can use 911 pretty much everywhere, same with 999, 112 etc, as it’s best for everyone that even if countries can’t agree or be bothered to standardised emergency numbers, that anyone can get the urgent help or assistance needed

[@QualityDoggo]

Yep modern phones will automatically dial emergency services

[@rolls_8798]

yeah, but if anyone wants to know it is '000' here in au, which is obviously superior

[@BLX187]

and it will automaticly ping your gps location to them. even if you have location services turned off

[@MrMeow-dk2tx]

Security nightmare? Yeah that part is, but at the same time kind of necessary.... Especially if you don't know where you are yourself

[@miscellaneous5425]

Also, the thing about "Find My" or it's Android equivalent is that they're provided by Apple and Google. If there were an open source version of this feature I'd switch in a heartbeat. I kinda need this feature because where I live there's a chance you might get mugged by two guys on a motorcycle at night. And I wanna have the ability to wipe/factory reset my cellphone remotely for that reason.

[@QualityDoggo]

I would love an open standard so the devices can all share a network. Imagine not worrying about "will someone with an android walk past it" and instead knowing all phones can securely help locate it

[@rolls_8798]

samsung has it's own version, and it has a few more features. but yeah, still a big corp

[@rolls_8798]

@@QualityDoggo idk, not a fan of apple suddenly forcing every iPhone device belonging to everyone to become a radio transmitter, pinging your location into the nether whether you want to or not. with the tile app you absolutely had a choice and it was a sort of reciprocal relationship - like seeding on torrent sites I think

[@billfarley9015]

Can you imagine if there were a Linux phone that was not spyware but was actually designed for the user? Then you wouldn't need a tinfoil hat, a Faraday cage or a Faraday suit to be secure.

[@zyansheep]

Theres a few of those: pinephone, fairphone... Edit: not fairphone

[@renatosardinhalopes6073]

At that point might as well solve global warming because these things are so easy aren't they?

[@apIthletIcc]

@@renatosardinhalopes6073 what's funny is people still use the term global warming, then for 3 months every year you never hear that term.

[@renatosardinhalopes6073]

@@apIthletIcc it's just like covid, the thing is still out there but people got tired of it so now they don't take it seriously. And just like covid, it's still a big problem. Thankfully there are good people out there trying to do something.

[@apIthletIcc]

@@renatosardinhalopes6073 let's just hope the 'smart' people dont solve it by starting an ice age.

[@energeticyellow1637]

"the age of the wired headphones has basically gone extinct" I'm never going to buy a phone without a headphone jack. Ever.

[@JShdwstar]

Same here. Having a built in FM Tuner is also a nice grab. Hard to find but plenty worth the effort.

[@TheEliteFriends]

You can turn off the Find My radio signals when you turn your phone off by putting in your password before you shutdown or by turning it off in Settings. That way you won't need an anti-RF bag and the radio signals won't be transmitted.

[@Garwinium]

Fbi: "decrypt this known terrorists phone" Apple: "no" **puts on sunglasses and walks out then blows up the building behind them while walking towards the camera in slow motion**

[@smoban]

breaking bad?!

[@lowwastehighmelanin]

Don't forget the CSI Miami theme song

[@fractal6929]

i’m too tired for this, this comment feels like a fever dream.

[@tablettablete186]

*shot on iphone* intensifies

[@marcogenovesi8570]

didn't they go ask an israeli "security" firm to crack that bad boy open and they did?

[@libertyresurrected7406]

all im hearing is, we can jailbreak your iPhone using a bluetooth insecurity of the hardware, however it can only be done to the phone you own cause we gotta upload some binaries as an active user. Hey, this sounds like a great idea, maybe GeoH0t will make a blackrain 13.0 or something.

[@Thebabybadass101]

Hey man love your channel just wanted to let you know your vids are super helpful and entertaining

[@MikeOxlong-]

They’re also just a video format of the days biggest click bait nonsensical stories brought out in the tech media. Most done without the slightest bit of analysis towards whether or not there’s any truth being told. Like in this case, well over half the story is just a fabrication of lies and gibberish...

[@floppa9415]

Jokes on you, Samsung sometimes delivers Security Patches faster than Google itsself and never lags behind.

[@spicynoodle7419]

Samsung, the only usable Android manufacturer in history

[@afacelessuser]

samsung also started the cat and mouse game of giving devices more years of android updates with the s22. other oems are trying to make their phones supported as long as or longer than samsung phones. look at google, the pixel 6a and 7 are going to be supported for 5 years

[@Hellsong89]

@@afacelessuser Ou they give updates alright. Useless crap that cannot be deleted with out advanced knowledge, just to fill up the OS so it wont run no more and you have to buy new one... It has nothing to do with security.

[@spicynoodle7419]

@Kanaba Nakamura it's budget, it's supposed to give you the bare minimum. Go pay $2000 for an iPoop then

[@RETRO-GHOST]

@Kanaba Nakamura yeah I hate it when people think Android is only Samsung, I own a Google Pixel 6 with GrapheneOS

[@greob]

Same thing applies for MacBooks by the way. Even while they are "sleeping", the wifi module is still active and transmitting data on the local network.

[@rg975]

No matter what, if you’re online in any way via hard-wire or wireless communication, your data is being exposed to some degree. I guarantee most, if not all Android phones stay on even while powered off as well. Just go with whatever platform you like most. Your data is never safe as long as you’re interacting with any other computer, simple as. If you want a piece of information truly secure, pen and paper are your best bet.

[@tikoblocks3224]

Actually, I disagree. I believe a note inside a bottle thrown into a chest, and then that chest thrown into the ocean is the most secure way of storing something. Plus a pass code and needed approval from multiple locations to even open the chest.

[@spicynoodle7419]

If Android turns itself off due to low battery it will power on to sound the alarm and then turn itself off again. A honorabru sacrifice. Anyway, this doomer POV is true but not valid. Just because some of your data will inevitably be stolen doesn't mean all hope is lost and you should send your nudes directly to Bill Gates.

[@teleprototype]

Or just like, you know, use end to end encryption for your messages to other people

[@guestc142]

@@tikoblocks3224 It's not secure if it's not impossible to get to it.

[@tikoblocks3224]

@@guestc142 Thats where the decoys come in

[@prayhe]

A couple of words on bluetooth still operating when the device is turned off: This "only" applies if bluetooth hasn't been disabled when the device was shut down (I'm talking about completely turning it off in your system settings not via the control center because that could also be accessed when the device is locked). And even with BT enabled you can tap on that little "iPhone Is Findable" text when turning your iPhone off and tell it to opt out of the Find My network. And if you wanna do so you can also permanently opt out of the Find My network in the devices settings.

[@AzuretareLPs]

I mean a hardware kill switch could be marketed as a convenient way to toggle off calls/notifications and people would possibly buy it for that. Maybe also include battery saving statistics. (Although I don't see Apple attempting this)

[@QualityDoggo]

plus, average consumers don't want to switch it off they want to be "always online" anyways. it would be meaningless and annoying to them.

[@marc-andreservant201]

iPhones being seen as "more secure" is a misconception. The walled garden only improves security if you would otherwise sideload sketchy apps, which you shouldn't do on any device. Android allowing more user control is actually a good thing, for example you can install hardened ROMs like GrapheneOS that have buffer overflow countermeasures.

[@omega_sine]

I bought a new iphone a few months ago and then soon after I ended up finding your channel and learning more about security. Kind of wish I held back on buying a new phone until after that :(

[@stumpf9938]

There’s really no point in being paranoid or unhappy about this stuff. Enjoy your device, love your life, and don’t stress so much about it. I’m all about privacy but at a certain point it becomes unhealthy paranoia.

[@tailsmilesprower1000]

@@stumpf9938 i agree

[@serkandevel7828]

As hinted at the beginning of the video, it's not that of a bad option out there to begin with.

[@Neucher]

have to ever turned off every background activity option on iphone and noticed it still pings back home to apple every 2 minutes to be almost exact ? I don't know but not even an Android phone with every Google service turned on does that. Pretty spooky if you ask me.

[@QualityDoggo]

What's it pinging? There are many things it could be. "Background App Refresh" doesn't include Push Notifications, Time, DNS, connectivity checks, FMi, etc

[@leatherhidegaming]

I love the part about where he mentions the lack of the mini jack port on recent phones and then shows high end Focal headphones that no one would directly use on a phone jack.

[@daikucoffee5316]

I gonna need that Faraday cage aren’t I?

[@theepicduck6922]

Doesn't hurt I imagine.

[@threestans9096]

got the same plan, man.

[@stumpf9938]

For what purpose? He established in this video that only incredibly highly skilled security researchers are able to pull this technique off. Unless you are being targeted by a government entity, you have a better chance of winning the lottery than having this be an issue for you.

[@aetheralmeowstic2392]

I hope that the _Open App Markets Act_ passes and forces Apple to allow sideloading on iOS.

[@OfficialGoldenboy]

Bruh it's 2022 who still uses a iphone lmao Us people that uses Flip phones ARE FAR MORE SUPERIOR IN THIS HUMAN RACE !!!!!!

[@Bruh-hd4rj]

Flip phones ???????????? Just carry your favorite thinkpad with you.

[@ReptilianLepton]

>human face

[@LovePoison23443]

I use a PinePhone as daily driver... you know the one with linux... and hardware killswitches?

[@arandomcommenter412]

@@ReptilianLepton yeah he’s the bacteria living on somebody’s face.

[@MaxBrix]

I think you actually work for the aluminum lobby. Trying to get us to make hats.

[@natekmbowie]

Listened to this video with wired headphones on my phone. Always find constantly recharging Bluetooth earbuds to be annoying, especially when you fire them up and get a battery low warning five minutes later.

[@swissix4947]

I hate that on my headset for my Pc. Its always that didnt i charged them yesteday? For my phone its ok. Mine last long enuth. And the cablesalad is gone. My cabled onse also alwas broke really fast because the cable gaot folded so hard the wires inside mashed up.

[@ltxr9973]

many years back when I had an iphone I always turned the "find my phone" thing off because its very nature spooked me

[@joudi_pics]

Btw you can disable it forever, easily from settings

[@Irilia_neko]

Sorry Apple I will continue to use my insecure android phone 🤣

[@QualityDoggo]

Please note, when you shut down it will give the option "temporarily turn off finding" and afaik this does completely disable any active-radio usage. If you really can't trust it beyond that, you're looking for a different type of phone. Apple builds phones for average consumers - people who are more afraid of losing the phone than of it being compromised. The pros/cons are up to you as the purchaser. Personally I like the "always findable" aspect of my phone and assume if I have it my location is probably tracked one way or another - plus there are plenty of ways to do surveillance that don't even need a phone lol (ugh ring doorbell go away) just note that unless Apple has a custom tweak in the OS for your device in particular (in which case it's always been possible to "pretend to shut down") we at repair shops can tell when radios are/aren't active - when you connect to a bench supply there is a significant difference when you switch things like airplane mode, power off, etc. and it's part of how we test certain components like Tristar for faults. I can assure you that from my personal experience when the radios are switched off they are actually off barring any exploits (which have always been theoretically possible - nothing special about malware altering UI on new vs old iphones)

[@FIREBREATH1001]

Headphone jack is the exact reason why i bought a pixel 5a instead of a 6.

[@Thebeast_QwQ]

"graphene and calyx are supported on many devices" you mean many and exclusively pixel devices?

[@lavi5h]

fr

[@KangJangkrik]

"android is privacy by default" MIUI: haha spy ads go brrr

[@Brenna_stubbs]

I normally just get the Google Pixel and just use a custom ROM that is privacy-focused

[@3lH4ck3rC0mf0r7]

How about we start the tradition of manually modding in an easily-accessible hardware killswitch into the wires for our phone batteries? Phone battery connectors are trivial, sporting only positive and negative power cables most of the time. I doubt most current designs have any countermeasures prepared for that yet, considering how standard non-user-removable batteries are by now, and how modding extra hardware killswitches into a device is not a thing. But we could start making it a thing... And if Right to Repair passes, corporations wouldn't be allowed to kill the battery management system when the battery is disconnected as well, something that phones don't do right now, but could in the future if modding battery killswitches became a thing.

[@3lH4ck3rC0mf0r7]

@Alts'Alts My only concern would be the evil BMSes that are designed to stop working when the batteries are disconnected. So before they could start getting rolled into phones as a response to end-users adding battery disconnect switches, Right to Repair laws would have to pass first, preventing companies from designing & using said evil BMSes.

[@3lH4ck3rC0mf0r7]

@Alts'Alts There's no real way. Either the BMS is also modified to not self-destruct, or, in the case of a battery swap, you use an external power supply to keep power to the BMS uninterrupted until the new battery is in. Both are infeasible in practice for the purposes of a hardware killswitch, which is why the main solution would be Right to Repair laws making it illegal for companies to implement such an anti-feature in the first place.

[@LaVaZ000]

That's amazing! If you ever lose your phone you don't have to worry about it turning off.

[@TondalOfficial]

For real this chanel is so educational and fun, thanks my dude for the vidz

[@miscellaneous5425]

The thing about Bluetooth is that even if you "switch it off" in the settings, it will still be scanning for other devices. The only thing that is disabled is the pairing functionality.

[@QualityDoggo]

incorrect. If you turn it off in control center yes it stays on, but switching from settings does disable it.

[@rolls_8798]

@@QualityDoggo that shit is so annoying. I don't know how you iPhone users stand it. Is the mass demographic of Apple users really so bad at remembering to turn bluetooth or wifi back on that they have to make it surpassingly difficult to turn it off in the first place?

[@Duc_hunter]

I have noticed that Siri started to ask to unlock the device in order to turn off Bluetooth. I think it wasn’t one or two versions back.

[@axethepenguin]

It isn’t a new feature, Siri on the lock screen just prevents turning off features if the phone isn’t unlocked

[@DaemonsAdvocate]

holy shit. this is like a hackers dream zeroday. one that cannot be fixed.

[@elsombero1747]

That's why my "privacy phone" is an Galaxy S5 Neo with Android 11 GSI without Google Services and other useless bloatware. And the best thing is that it's easy to repair and I can swap the fcking battery without any tools!!! But wait, isn't the phone sustainable to liquid damages? Not really... I accidently forgot my S5 in the jacket, it was in washing machine for 1 hour and 20min (Eco Washing Program 40*c) and it survived. It's really sad to think that modern, flagship phones don't allow you to easily swap the battery. I even carry a second battery in case the other one is reporting 5% charge and I still need to use my phone. NFC Entry still works on this phone via a 3rd party NFC Tag Emulator which is also blocked via firewall

[@NoName-vq6cg]

How long have you had the phone for?

[@YezzyHD]

with the payment thing you should keep one thing in mind. "This feature isn’t available when a standard user-initiated shutdown is performed."

[@jokroast6912]

Can the Pinephone or Librum 5 have encrypted and signatured Bluetooth? I'd imagine adding small security roadblocks in that department wherm it might not exist would not be that difficult(?).

[@TheRailroad99]

It is not that difficult to sign the firmware on most chips. However many manufacturers don't implement it

[@QualityDoggo]

FWIW it's incredibly difficult to modify iPhone firmware in a meaningful way, especially without physical access. Apple locks down most of the system especially the security components and cpu.

[@wafflecopter9296]

I thing Louis Rossmann or some other tech youtuber pointed out that the only way for your phone to not be traced is if the battery is completely disconnected. And any possible backup power. If the device has no power access it cant communicate

[@yrm1594]

Every time I think about it I'm more convinced that my Redmi 9 was a smart purchase. Relatively durable and powerful, pretty good battery life after 2 years, and lastly, a headphone jack.

[@drift180x]

Thanks for making me aware of these anti RF bags. I had no idea there was a thing like that. I’ll have to pick one up. Kudos.

[@guest1754]

1:12 Well, as far as I can tell, Samsung and Sony are rather decent compared to other Android manufacturers when it comes to security updates. Cheaper phones, especially those produced in China, don't receive updates as regularly and/or as long.

[@swissix4947]

Especially the S series. Ive seen an update on it even before on googles own phone. If i watch in catalogs of electronic Shops on many cheap phones ist still Android 10 as base os. For a NEW phone.

[@MatthewCobalt]

You know, they could easily turn the mute toggle into a killswitch when it's turned off. They won't do it, but the option is right there.

[@Jbrimbelibap]

Using CrDroid right now, it is really good, best rom i tried out in 2 years time

[@Alias_Anybody]

In terms of features? Base is still Lineage as far as I know (?) so performance or battery life should be similar.

[@Jbrimbelibap]

@@Alias_Anybody It's full of features, an amazing amount. Even has a port of the stock camera for my particular phone, insane. Might be based on lineage, doesn't really matter lineage is also open source

[@nikkehtine]

0:08 that program on the monitor looked to me like FL Studio at first glance and I thought they were sitting around in a server room, in dim light, making fire beats together

[@imados21]

From power off to radio kill switch , what a long way we have come

[@LilacMonarch]

Remember when phones had easily removable batteries? Sigh...I still use one, obviously it's not my daily driver but I use my xperia play for emulators since it has a neat built-in controller. It can't do much beyond DS/PS1 level but that's still a massive library of games playable on a less than 5in long device in my pocket ;)

[@mblend27]

You must not be paying attention, even if the battery dies on the iPhone, these radios still function, the antennas are still connected, a kill switch would disconnect the antenna

[@LilacMonarch]

@@mblend27 uhh I think you replied to the wrong comment?

[@OneAndOnlyZekePolaris]

SIM isn't for that. SIM cards are chips that hold information and allow you to connect with your network. This means you can make calls, send SMS messages and connect to mobile internet services like 3G, 4G, and 5G. They're also transferable and you can choose to save messages, contacts, and emails to them.

[@xE92vD]

Man, people call iPhones secure. They don't know that iOS is closed source while android is open source.

[@alert2]

Skill issue lol

[@masoclevine836]

git gud

[@henrymach]

Meh. Anyone who gives money to Apple doesn't deserve any privacy

[@charleshines1553]

Google has a find my device function too. Try it, you might find it to be similar to find my iPhone in some ways.

[@kiloton1920]

I felt most secure when I used to use a burner and switch numbers and account every month or two but then I realized they could just figure me out within a few days by who I was talking texting and calling

[@Ultrajamz]

Fuck I can hear Satania laughing at me now (only true chads know the reference)

[@marcogenovesi8570]

@@kryochicken colorized

[@boltzbrain3039]

Time to get a Pinephone64 it actually has hardware switches....and actually runns linux.

[@OneAndOnlyZekePolaris]

You can custom rom iPhones though. But it will void the warranty of the device.

[@noanyobiseniss7462]

I literally keep a phone with battery discharged and only charge it when I know I will be needing it for a trip.

[@jan_harald]

more appealing than what, android has also google's find my android, lol

[@triularity]

Another reason we need laws *requiring* mobile devices have a hardware power switch, especially in ones which don't have a user removable battery.

[@k0lpA]

But... im pretty sure it's the law that requires them to NOT have them..

[@decryptingelectrons]

Newer Androids with both LG and Google ... Require you to enter the screen lock to shut down or reboot

[@StuffJason437]

Just remember that using a RF blocking bag won't solve the problem, as the device will increase it's broadcast power levels until a connection has been established, and beyond certain power level the signal will make it's way to the cell tower eventually, so those shields and bags won't do hole lot. (It will also do this while the device is off just, fyi)

[@r0e404]

how do you know this?

[@StuffJason437]

@@r0e404 Because I learnt from past mistakes lol

[@realcartoongirl]

@@StuffJason437 he said that in the video

[@StuffJason437]

@@realcartoongirl I wrote my comment before I'd come to that portion of the video, and didn't delete it afterwards. ~Stay Safe.

[@realcartoongirl]

@@StuffJason437 no i will stay dangerous

[@vladislavkaras491]

Huh... making phone offline is longer offline... Thank you for the video!

[@mynameisnotyours]

I'm a fan of graphene.

[@startedtech]

Samsung's been releasing security updates faster than Google has for their Pixel phones, lol. It's not like 5-10 years ago where you were lucky to get one or two updates a year.

[@mosthatedtwink]

lets also not forget that you have choice whether you want iphone antennas off when turning off your iphone (Turn off Find My on Power Off)

[@only1gameguru]

I know my phone is unfindable when I close it in my microwave

[@devops117]

well android's design and Qualcomm's integration is bad the way they manage the sourcecode in a poor manner which make it extremely hard if not financially impossible to provide updates of their distribution kernel

[@sdjhgfkshfswdfhskljh3360]

Most annoying is that people will still refer to such devices as "powered off". Because it is both hard to change language and convince manufacturers to change their behaviour.

[@ernestsdane3510]

Great and entertaining video, as always

[@xXm33masterBadXx]

I worked for a cell phone company at one point that utilities ATT towers. The SIM is there for authentication with the towers for LTE and 5G. When your phone connects to the towers, your IMEI is verified with the network authorizing data usage. I'm interested to know if without any SIM an iPhone can be located still as ATT doesn't allow any data transfer unless a verified SIM is detected.

[@mfThump]

it uses Bluetooth Low Energy.. same as the air tags.

[@4cps777]

Kenny, what do you think is the most secure Android ROM for a phone that isn't a Google phone?

[@PhunkBustA]

0:00 you can just hear the jazz hands

[@-my4skinwastakeninasickjew426]

So where is your link to a faraday bag sponsor.

[@romu5915]

thank you so much for sharing this method with !

[@nobafan7515]

What I have to remind myself from bring both depressed and frustrated at the situation is the fact that so many people feel entitled to have the features that are then used to put them in danger. You have immature and irresponsible people getting angry in the past at the company for not figuring out a way to help them find their lost phone ("it's current year" / "they can put a man on the moon, but they can't do [x]"). Add on top of that, and they want to have their phones to be secure so that they can live carefree while the hackers can't find it. Not realizing the whole safety vs freedom riddle they contend with.

[@ThomasConover]

just buy a pocket size faraday cage bag to keep the phone inside when "off" then.

[@jondo7680]

It's funny because I listen to this while my headphones are connected to my phone with wires.

[@genericgoat]

I've wanted to load a custom ROM onto my phone, but it is a Motorola G Power 2021 so I have not been able to find any that are compatible. Does anyone know what, if any, custom ROM isn't likely to brick my phone?

[@someonestolemyname]

4:02 I am not sure my phone is off, but the battery is taken out, and there is nothing similar to a battery when I opened it.

[@someonestolemyname]

@Magic Mike It isn't impossible considering the low amount of charge it needs to use, but since you either need a super cap or a special li-ion battery with a small form factor, I doubt they will do it. Especially since removable battery is already fading away.

[@poketcg1592]

Is this why turning on "airplane mode" doesn't actually help with battery usage??

[@Vaasref]

5:56 My Xiaomi Redmi Note 9T still has a headphone jack. Also has an IR blaster, for some reason. I wouldn't say that I trust it though.

[@stumpf9938]

At least Google/Apple devices aren’t owned by the CCP like Xiaomi. I’d bet that Chinese smartphones are the spookiest.

[@PennsylvaniaEAS]

I miss when Android phones had an IR blaster. Lost the remote? No problem TV too loud in the waiting room? Turn it down

[@CaptainTreeJay]

I have a rooted OnePlus 7 pro, can this phone use a radio kill switch? If not what is the best phone to upgrade if I value rooting and privacy, I'll be using grapheneos regardless

[@marcogenovesi8570]

GrapheneOS, the Glowie's best friend

[@cyrilio]

Could you do a video about faraday cages and perhaps give a DIY guide?

[@d3zone]

my first thought was: "hey at least it's good for the custom Rom community as an entry point" "wait what custom Rom community?"

[@MaryGarbovska]

Please answer when my phone was turned off, the function of finding my device was turned on. But I did not include this function. How is that possible?

[@ghost_ship_supreme]

This is why I don’t store payment methods on my phones

[@sleepingwitdemons3666]

You can find your iPhone with iCloud even it’s turned off or dies (but only for a short time after it dies)

[@daikucoffee5316]

Is that based on recent GPS data or Bluetooth proximity?

[@-_Red_-]

@we did it no

[@HaxxorElite]

owo

[@CoteaGeorgeC]

@@daikucoffee5316 on iPhone 11 and newer with UWB it works over a mix of ultra wide band proximity and the find my Bluetooth network.

[@Kash.mp3]

Bluetooth is not that unsecured tho, the change frequency every ms