[Replicant] Replicant risks

[Denis 'GNUtoo' Carikli]

On Wed, 28 Aug 2024 11:21:09 +0200
amuza via Replicant <replicant at osuosl.org> wrote:

> How risky do you consider Replicant because of its outdated software?
> 
> What dangers do you see?
First the browser component shipped by Replicant is outdated, so it's
probably trivial for a website to take control of the phone. The system
browser component is used in a lot of applications shipped by F-Droid.

But it doesn't stop here as there could be unpatched vulnerabilities
everywhere in the system, including in things like the SMS application
for instance.

So even if the phone is not connected to Internet there are still risks.

Denis.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20241001/b2d41df7/attachment.asc>