My smartphone is a simple affair. I have a hardened Firefox as my default browser (uBlock Origin with JS disabled by default with HTTPS-Everywhere addon with EASE turned on).<p>I keep my app-count to a minimum. There are people who need every app imaginable, but that increases the attack surface of the phone. Try to minimize the amount of apps on your phone please!<p>Then of course all the usual OPSEC practices like not clicking on suspicious links in Whatsapp, E-mail or SMS always apply. You have to consider the human element of all this. So many people have been owned by fat-fingering some suspicious link in an SMS that then took over their phone.<p>But there is always the argument that: phones <i>ship</i> with malware anyway so you're pwned either way.
<a href="https://www.qualcomm.com/company/product-security/bulletins/november-2020-security-bulletin" rel="nofollow">https://www.qualcomm.com/company/product-security/bulletins/...</a><p>This happened months ago but I still can't see much info. Also, I see check point reported 4-5 issues to qcomm, not 400.<p>To people complaining android never gets updates: Android has been providing monthly security updates for some years now. It is even possible that this was fixed even faster since modern android can update some system libraries right from the store (Project Treble announced in 2017)
Actual source: <a href="https://research.checkpoint.com/2021/security-probe-of-qualcomm-msm/" rel="nofollow">https://research.checkpoint.com/2021/security-probe-of-qualc...</a>
<p><pre><code> 400 vulnerabilities! Good luck getting any reasonable percentage of users to install these patches. The software update situation on Android is horrible.</code></pre>
The duration and quality of security updates/fixes is roughly commesurate with the price users paid for the s/w part of their mobile devices.<p>That's pretty cool - you can pay almost nothing for the s/w and still get a phone that works.