- Edited
any news about a fix? pixel 6a. does not always cut, depending of caller. Putting it on speakerphone makes my problems go away, though.
the cuts happen a little bit later in the phone conversation
any news about a fix? pixel 6a. does not always cut, depending of caller. Putting it on speakerphone makes my problems go away, though.
the cuts happen a little bit later in the phone conversation
thanks for all your answers!
yore Remember to develop a realistic threat model. It will make your life much easier 🙂.
Yeah... simply wanted to know more about remote attacks abusing a 6 digit code! It seem like it would indeed be a Government or Terrorist group attack! I'm far from that range.
Dumdum I mean, even if this hypothetical thief could use the code remotely, couldn't you just change the code?
it's just theoretical! And I change my codes often!
de0u That sort of chain may exist, but they tend to be held closely by national actors, large criminal gangs, etc., not in the hands of purse snatchers.
Merely knowing your PIN, without substantial access to the device, isn't very powerful.
That's a huge part of the answer i was looking for! I know you can have pin code to log in to a windows 11 machine... a pin code that can only be used when someone has physical access to the pc. It can be use as a replacement for a big and complex password that you find tedious to type.
Just wondering if it is the same principle with the phone unlocking code
Hi! I know that if an attacking party has my phone in his hand and knows the pin code shared between 2 users, that would result in a compromise for both users.
But what if I'm able to punch that phone thief in the face? Then, the thief proceeds to try to hack my phone remotely out of spite?
If a hacker knows my 6 digit code to unlock my phone, can he use that code remotely?
If yes, can he switch users using that pin code remotely?
Is a 6 digit phone unlock code even usable by hackers remotely?
Thanks
my apps no longer have "battery optimization" options... i have an "allow background usage" toggle instead. And now all my apps have that toggle enabled.... is this what is intended to happen?
[deleted] It's all about threat modeling. Everyone is different in that regard! I'm willing to give that extra info to google for the convenience! That's just my way. Explaining my point of view, however, can be something others can consider before using aurora VS sandboxed play store.
[deleted] I switched to sandboxed play store with a fake google account. i never looked back again. security, conveniency and privacy! WAY, WAY more private than stock play store.
the "it just works" factor compensates BIG TIME for the time i spent on getting aurora to work long term.
thats the problem. people say its easy to use and that no one has issues with it. i call bull. its too clunky to be considered a solution. Its not the devs fault though, google is the #1 cause for all of aurora's issues.
Like Oggyo mentioned, a gitlab account is recommended. Not only for the token, but also to complain about aurora bugs and google throttles. The same account can be used to get notifications from issues created by other users instead. I ragequit aurora 3 times. I'm done with it. Just expect aurora to behave like my last experience with it:
Install aurora
Enable notifications about new updates
Not receiving notifications for 2 days
Open aurora to check for updates manually
Aurora is not connected as anonymous
Connect as anonymous
Error
Uninstall aurora.
If only it worked....
this is about the 3rd time i ragequit aurora store. If you want to use it, be willing to follow or create issues on aurora's gitlab repo. It's a buggy mess and may get throttled by google "just because". I gave up on it and made a fake account. To make a fake google account without a phone number, i needed to connect to a france vpn server and create the account on the play store app itself. You may need to create a fake user between 13 and 15 years old for the "skip" option becomes available.
If you wanna use aurora, make sure you are willing to create or follow issues on aurora's gitlab page.
tried aurora for 2 days. i got an error already. It was not giving me any notifications for new updates so i opened up aurora and found out i was not connected as anonymous anymore. When i press on "anonymous" I get an error. How is this "easy to use"? What is your definition of "no issues" ?
p338k I decided to give aurora another shot. Do you have to set battery optimization as unrestricted in order to get notifications for new available updates?
I've made an account without a phone number yesterday via the play store app. I was connected to a France ProtonVPN server (im not from France) and I tried the "14 year old user" trick. It gave me the option to skip the number! You may ask, why a 14 years old user? It's because if you set the birth date as under 13 years old, google will qualify the user as a child and when the user is over 15, that user may have a cell phone.
oh and i also read that the throwaway gmail account will land in settings -> Passwords and Accounts. Is that a bad thing?
so basically aurora's anonymous accounts are just delaying the inevitable?
p338k What if I tell you I've been using play services since the beginning? I'm only asking about the additional privacy risks of using a throwaway account with play store vs aurora's anonymous accounts. Does play store add that risk you just described? Or is it a play services thing?
Okay, i've read more on the subject. Sandboxed play store with a throwaway account will simply let google know which apps are on my phone.. nothing more, nothing less. Am I right on this assumption?
this is from aurora store's gitlab repo: Token Dispenser Server is not super reliable, downtimes are expected.
How frequent are downtimes now?
Viewpoint0232 yeah.... thats what i thought.. you weren't there to see it! I guess I can try it again! it's just that i don't get notifications from aurora for new updates while play store and obtainium (via apkpure) do have notifications or auto updates...