I have learned a lot and read a lot on the forum.It has been very helpful for my usage and decision-making.
Since a week ago I got my MK, I have honestly serious concerns about their security issues, basing their security measures on Android 12 (The threads on this forum were very helpful to understand the potential risks, but I cant link them ). I am disappointed that they have not really provided substantial answers and timelines how they want to fix this fundamental problem. But I am desperate to quit my addiction to my smart phone and MK has been the best option for my needs, so I still gave it a try.
Here are some measures I do trying to minimise the risks.
No bank app, no digital wallet, no insurance app, no health data app, no E-mail app, no workplace app and no password management on MK.
No app without a clear and legit source
Try to have as few sideloaded apps as possible and only keep the absolute necessary ones
Update the sideloaded apps from F-Driod and Aurora regularly
Keep MK in the offline+ mode most of the time, and especially in the public space
No use of Bluetooth in a regular sense and use cable earphone only
Use only mobile data
For the apps in the first point,I have still my smart phone as backup and check it only twice a week. I bring my public transport ticket as physical card and so as the credit cards for payment. I am concerned if I should have the period tracking app as the reminders are so useful for me. But maybe I would keep it just on paper calendar.
As I am not a tech expert, so I would be grateful if some of you could have a look to see if these measures are not effective for securities or there are some other tips you have. I am still thinking if i would keep MK as it is still within the returning window.
And the last point: I heard that the offline switch can break after some time and you could be stuck between two modes all the time…Would be happy to know if I shouldnt use it too much.
Hi @jjj5468f Welcome to the Mudita Forum. We are glad that you’re here. Thank you for reaching out & giving us your feedback.
Did you have a chance to read the posts from our Managing Director @michalstasiuk regarding our approach to security updates?
I’ll link them below, so you can read them, if you haven’t gotten a chance to take a look.
Additionally, each MuditaOS K update does also include security updates & we do mention this in the changelog/ release notes which is posted on our website after each update.
If there’s some specific point that @michalstasiuk has not clarified, please let us know. We’ll do our best to explain our approach,
Hi urszula,
thank your for the links and I have seen them. But after reading all the questions and comments raised by the users below, I still feel not convinced. I would really wish one day MK is updated to a newer version or all the security issues and vulnerabilities were actually taken care of, in a transparent way (I would not list them as others have given great overviews in the replies of the threads you pinned). Thanks though still!
Seen on signs posted on columns in a parking garage (paraphrasing):
LOCK YOUR CAR!
KEEP VALUABLES OUT OF SIGHT!
DISABLE BLUETOOTH ON ANY DEVICE LEFT IN CAR!
The reason for the third command is that the security people for the parking garage discovered that thieves were using Bluetooth-signal detectors (such as a cellphone!) to detect Bluetooth-enabled devices in cars and then breaking into THOSE cars to steal those devices!
Good mobile security starts with not needing mobile security. I like your minimalist approach to Kompakt usage.
I don’t have concern that the base of MuditaOS is from android 12; it’s been stripped and cleaned up, in my opinion, a bit farther then necessary in some basic functionality.
Security is not an issue on the Kompakt if it is used as intended, security risks are created when users push the device to be a smartphone, eg adding banking apps etc.
The fact that Kompakt runs a modified AOSP 12 does not make it any more of a risk, I have been using most of the steps you mentioned, and some that you didn’t, for a long time, on the Kompakt and several other flagship devices, I own.
Many people on this forum compare the Kompakt to devices like an iPhone and say there are security flaws, this is an apples an oranges comparison.
Regarding the offline switch, I have used this feature on my Kompakt at least twice a day since I’ve owned the device and it still works perfectly. It is one of reasons I bought the Kompakt, as with any public forum you will read lots of voices of complaint, and less happy customers singing the products praises
Additional security… It has adequate security… my opinion, based on experience I like that the Kompakt can be unlocked and set to time out.
I think it is essential to have physical security and the compact size supports that. Some phones are too large for me to fully pocket carry.