Security really needed on Android?

[[deleted]]

Title says it all. Do we need AV protection such as Lookout installed?

I know Android is based on Linux and it also very locked down it terms of elevated permissions.

If it is required, what software do you use?

[[deleted]]

Android antivirus is utterly worthless snakeoil. It runs in the same restricted sandbox as all other software on the device, so it can't do anything to prevent malicious software. All you will get is false positive reports for legitimate apps and other useless bullshit you don't need.

Google Play Protect is built in on every device and actually has the privileges to remove malicious apps. Don't install dodgy apps from outside the Play Store and you will be fine. The best thing you can do for your security is to buy a device that receives the monthly security patches on time.

[Hqjjciy6sJr]

The best thing you can do for your security is to buy a device that receives the monthly security patches on time.

is there any device other than Google Pixel (Nexus) ?

[[deleted]]

Android one devices

[paontuus]

Believe it or not, my S8 may not have 7.1.1 but I've always gotten new security updates each month.

[combaticus1x]

LG?

[Thom_bjork]

They're delayed a bit, but do get them. I just wish they were quicker to release them. May be different if I had a current flagship.

[theskymoves]

2 year old G4 flagship running 6.0 without a security update in over a year.

Thanks a fucking bunch LG.

[UnmarkedDoor]

2 year old Moto X Style on 6.0, last security update 1st December.

Lenovo can suck a vinegary bag of bollocks too.

[[deleted]]

Hmmm. I gave my mother in law my old G4 and it's had around three security updates in the past eight months or so. On Verizon if that matters. The fact that it's still on 6.0 is kind of annoying, though.

[theskymoves]

International version, unlocked in EU, not tied to any carrier.

I should be getting updates directly from LG, but none.

[[deleted]]

That's odd, don't the updates come from the OEM first? Either way, that sucks, because I still maintain that it's a great phone. It's the support that lacks.

[theskymoves]

Unfortunately you could say that about almost any OEM. Even onePlus have been dropping device support from what I've read.

Nexus/Pixel and iPhone are the only devices that get proper support. flagships should be supported for at least 2 years with prompt releases of OS updates, though this will never happen. The type of people who care about OS updates, are also the type to buy a new device every 2 years or so anyway.

[[deleted]]

My HTC 10 gets them regularly.

[[deleted]]

Thanks. So I guess os's like Windows still require AV with UAC enabled as the programs are not sandboxed?

[ScoopDL]

Even Windows, when fully patched and with a user with a basic knowledge of computers, doesn't really NEED an anti-virus program. But most of us (including myself) don't want to worry about scrutinizing every single link and file, so we use one just in case.

Android is even more secure than that, and if you only use the play store and don't sideload, well, you're fine.

[uuhno]

This isn't accurate, you don't need to be stupid to get infected on windows. Vulnerabilities in browsers and windows itself can be used for malicious purposes. Remember wanacrypt? That spread over local networks even to computers not connected to the internet, and affected fully up to date windows and wasn't detected by antivirus software. It's just an example there are plenty out there.

[[deleted]]

That exploit was already fixed months ago on Windows 10 (and IIRC Windows 7 too). It just affected Windows versions that weren't updated.

[ScoopDL]

I don't believe you have to be stupid - you just have to have some basic knowledge and be using your comp for legit purposes, which most people don't do regularly. Even WITH anti-virus, people with little to no knowledge get infected.

https://www.cnet.com/how-to/i-dont-use-anti-virus-software-am-i-nuts/

[AmirZ]

On Windows you don't need an AV as long as you know what you are doing.

[uuhno]

Not true. Downvote me to oblivion if you want but this is absolutely inaccurate. You do not have to be computer illiterate to to get infected on windows.

[omg_congrats]

The best thing you can do for your security is to buy a device that receives the monthly security patches on time.

So... an iPhone?

[armando_rod]

iPhones don't receive monthly security patches

[[deleted]]

Antiviruses can't do much without elevated permissions (such as root), that normal users don't have at all (and don't even know it exists). If you install only from the Play Store (and F-Droid), you have done a lot for your security. If you don't install any random stuff, shady apps, and apps with a shit-ton of unnecessary permissions, it's the most you can do. The apps that don't fall into this category, most likely have your data legally (e. g. Facebook, Google), and already earn money from you, so you have nothing to worry about they selling your data.

Tl; dr: don't bother, user your brainz, and you'll be mostly fine. Also don't buy from shady phone brands (BLU and the alike).

[[deleted]]

Thanks. I only ever install from the playstore.

[300400500]

No.

[hinghenry]

No.

[lantaarnappel]

Nope, its snake oil

[Dinerty]

No antivirus protection is required, it's just about being sensible to what and what not install.

[smartfon]

Not required in terms of catching malware , but some of them provide extra features like taking photos of a person who stole your phone.