Every Phone Should Be Able to Run Personal Website

Re:Every Phone Should Be Able to Run Personal Website – Roha... by necrophcodr on Saturday August 12, 2023 @11:01AM (#37100865)

To be clear, I am all for self hosting stuff, but it needs to be in a proper, affordable, standardized package that can be kept secure and useful. A phone is NOT that.

[ Parent | on HN ]

Re:Every Phone Should Be Able to Run Personal Website – Roha... by jeroenhd on Saturday August 12, 2023 @11:07AM (#37100940)

Why not? I download updates to apps on my phone every day. I fact, my old phone that has long stopped receiving updates still runs the latest browsers just fine. The problem isn't keeping the applications up to date.

There's a risk of kernel exploits, but I can't remember the last time the Android kernel had a bug that could be triggered by simply sending packets to it. Privilege escalation works, maybe, but getting root on Android is a lot harder than most Linux servers because of the very strict and isolated SELinux contexts.

I've installed termux on my phone and I can install nginx with a single command. Downloading a Debian chroot and launching a full, maintained Linux distro is two commands away.

Until remotely triggered Android kernel exploits become a thing, I don't think the updates are the problem here.

[ Parent | on HN ]

Re:Every Phone Should Be Able to Run Personal Website – Roha... by mappu on Saturday August 12, 2023 @08:14PM (#37105370)

> I can't remember the last time the Android kernel had a bug that could be triggered by simply sending packets to it.

RCE from Bluetooth packets has happened uncomfortably often - CVE-2017-0781+2 (BlueBorne), CVE-2020-0022, CVE-2022-20411, ...

[ Parent | on HN ]

Re:Every Phone Should Be Able to Run Personal Website – Roha... by jeroenhd on Saturday August 12, 2023 @08:49PM (#37105560)

True, but Bluetooth doesn't work over internet. Plus, you can just turn it off if you worry about it.

[ Parent | on HN ]