That is terrifying given how the phone is the single key to many people's digital identity and their finances.
And that's what scared me into changing my relationship with my phone. I try to treat it as an ephemeral, disposable data terminal in which I have minimal trust.
Every few weeks I back it up to the LAN and purge it. If I lose it I revoke its login certificates so that it can't access the mail and chat servers, and block the PAYG SIM.
Yet more and more services want me to regard it as a secure token endowd with ultimate trust. The latest is one of my banks ( Halifax ) which demands that I install their app to authorise any online payment.
I'm holding out hope that one day we will see an up-to-date iPod Touch type device for the Android ecosystem. (With fingerprint/NFC support, unlike the iPod Touch.) I could carry this around as a "clearnet terminal" and power it on when needed, mostly for banking, casual communications, and non-critical password storage. Everything else is relegated to more secure single-purpose devices that avoid touching the broader web.
Comments
That is terrifying given how the phone is the single key to many people's digital identity and their finances.
And that's what scared me into changing my relationship with my phone. I try to treat it as an ephemeral, disposable data terminal in which I have minimal trust.
Every few weeks I back it up to the LAN and purge it. If I lose it I revoke its login certificates so that it can't access the mail and chat servers, and block the PAYG SIM.
Yet more and more services want me to regard it as a secure token endowd with ultimate trust. The latest is one of my banks ( Halifax ) which demands that I install their app to authorise any online payment.
I'm holding out hope that one day we will see an up-to-date iPod Touch type device for the Android ecosystem. (With fingerprint/NFC support, unlike the iPod Touch.) I could carry this around as a "clearnet terminal" and power it on when needed, mostly for banking, casual communications, and non-critical password storage. Everything else is relegated to more secure single-purpose devices that avoid touching the broader web.
You can also use apps and protocols like PhotoSync, GoodReader and WebDAV/CalDAV to wirelessly move data from phone to home NAS.