Is my 4A dead now?

Graymh

The 4A was my first degoogled phone with GOS, I have been keeping it as a backup phone while using the 6A and my daily driver.
I've just noticed that some of my apps are not updating very well. Examples are Tuta mail and Pcloud. Protonmail still updates but I prefer Tuta.
I'm wondering if the 4A is too old to use recent updates of some apps.
Any advice from you cleverer folk would be appreciated.

de0u

Graymh I'm wondering if the 4A is too old to use recent updates of some apps.

In addition to being insecure, it is stuck on an old version of Android, so some app updates are not compatible with it.

grayway2

Graymh pixel 4a (no 5G) is stuck on Android 13 and is missing a lot of vendor security patches.

Its secure element throttling was bypassed so unless you're using a strong passphrase your phone is vulnerable in BFU.

If you like the form factor of the 4a and want something similar, I suggest you to invest in the Pixel 8.

Fay_Wilmont

grayway2 Its secure element throttling was bypassed

Can you say a little more about this, and/or provide a link to a substantiation of this claim?

Graymh I'm wondering if the 4A is too old to use recent updates of some apps.

It depends on the requirements of said apps. What does “apps are not updating very well” mean exactly?

I have a Pixel 4a running Android 15 with Google Mobile Services and haven't had any problems updating the apps I use, whether from the Play Store or other sources.

DeletedUser588

Graymh I wouldn't say it's useless, just probably shouldn't be a daily. For example I use an old pixel 5 with Graphene solely for Android auto in my car. It serves that role well.

inomfood

Yes, your 4a shouldn't be used anymore if you care about security.

grayway2

Fay_Wilmont Can you say a little more about this, and/or provide a link to a substantiation of this claim?

https://www.securityweek.com/critical-vulnerability-googles-titan-m-chip-earns-researchers-75000/

https://blog.quarkslab.com/attacking-titan-m-with-only-one-byte.html

Fay_Wilmont

grayway2 Thank you! The last one was a fascinating read, even though most of it went over my head as I'm not exactly familiar with this topic.

Since this vulnerability was patched by Google in June 2022, and the Pixel 4a received updates until August 2023, why do you say:

unless you're using a strong passphrase your phone is vulnerable in BFU.

Was that a mistake?

grayway2

Fay_Wilmont because the Android Support Matrix from Cellebrite indicate that all pixels equipped with titan M are vulnerable to BF in BFU state. So even if the mentioned vulnerabilities were patched, the problem persist.

I don't really know if they are exploiting an undisclosed software vulnerability or a non patchable hardware vulnerability like for the T2 chip or secure enclave of older iPhones.

I'm not against clarification from GrapheneOS account or a more knowledgeable person about this question.

Fay_Wilmont

grayway2 Please help me understand your first sentence. I think Cellebrite is a company that offers security bypassing services, and they have a document called Android Support Matrix that details which Android devices they can get into? BFU is Before First Unlock? And BF is… ?

Probably9857

Fay_Wilmont And BF is… ?

Brute force

Graymh

Sorry for being late, don't come here often enough. I've been setting up a pixel 8n
for my wife who is finally diching her iPhone for grapheneOS.
I'm noticing changes that may relate to my 4A. It seems impossible to install from Aurora like previously. Ive always had google play store, services and GmsCompat disabled, now is seems that to enable them is the only way to download essential apps. It wasn't that way before.
I set up a dummy google account in the process.
The times,they seem to be changing... those here born pre 60's may not get that 🙃)
I'm not to clever at all this but am enjoying a level of privacy so very essential in these post (?) scamdemic times.