dslreports logo
view:
topics flat nest 
Comments on news posted 2018-01-19 16:00:02: Phone manufacturer One Plus has confirmed that the company was hacked and user data was compromised after numerous customers complained of credit card fraud in the wake of buying a phone from the company. ..


C0deZer0
Oc'D To Rhythm And Police
Premium Member
join:2001-10-03
Tempe, AZ
42.7 11.3

C0deZer0

Premium Member

State of the phones

Banks want us to have 'virgin' phones to process payments with, but then they (and their makers) get hacked anyway.

Apple has its own pot of hot controversy going on now. Android phone market is a mess. Microsoft checked out of making phones altogether (again).

Where *can* one go, anymore?

I find myself asking that daily, considering i have a Note 3 variant that's only 3g, but has outlasted its intended replacement, while the end of non-lte support looms much as a guillotine.

So, what can i, as a person that wishes phones were able to be customized in the way one can build a PC, do? I see no point spending money in blatant planned obsolescence.
ISurfTooMuch
join:2007-04-23
Tuscaloosa, AL

ISurfTooMuch

Member

Re: State of the phones

You might consider a Pixel 2 or Pixel 2 XL. Pure Android, and, if you buy it from Google (as opposed to Verizon), the bootloader is unlocked, so you can flash custom builds of Android if you like. Even with the Verizon version, there's no bloatware, and you get OS updates as soon as Google pushes them.

I swapped a S7 edge with a dying battery for the 2 XL, and it's been fantastic. And, while some folks have complained that its OLED screen isn't as vivid as Samsung's, I have no problem with how it looks. As far as the blue tint people have mentioned, yes, it's there, but it's only noticeable when you tilt the phone at an angle you'd never use it at. For normal use, I don't notice it at all.

C0deZer0
Oc'D To Rhythm And Police
Premium Member
join:2001-10-03
Tempe, AZ
42.7 11.3

C0deZer0

Premium Member

Re: State of the phones

said by ISurfTooMuch:

You might consider a Pixel 2 or Pixel 2 XL. Pure Android, and, if you buy it from Google (as opposed to Verizon), the bootloader is unlocked, so you can flash custom builds of Android if you like. Even with the Verizon version, there's no bloatware, and you get OS updates as soon as Google pushes them.

I swapped a S7 edge with a dying battery for the 2 XL, and it's been fantastic. And, while some folks have complained that its OLED screen isn't as vivid as Samsung's, I have no problem with how it looks. As far as the blue tint people have mentioned, yes, it's there, but it's only noticeable when you tilt the phone at an angle you'd never use it at. For normal use, I don't notice it at all.

Ugh, no. Nexus and Pixel are basically Google aping the worst aspects of the iPhone harder and harder. The sealed battery is a BIG deal breaker for me.

If you really need to ask, blame the MXPE I used to have.

Simba7
I Void Warranties
join:2003-03-24
Billings, MT

Simba7 to C0deZer0

Member

to C0deZer0
I like my spare phone. It's a Samsung Galaxy S3 (AT&T unlocked) running LineageOS 14.1. For being ~6 years old, it runs really smooth. Can't wait for Oreo to come out for it.

Not to mention, they're cheap on eBay.
rbeyer229
join:2016-07-07
Prairie Du Chien, WI

rbeyer229 to C0deZer0

Member

to C0deZer0
"I see no point spending money in blatant planned obsolescence."

Well, I guess your days of commerce are over then...because ALL companies are doing this today. They don't make money when you buy something once and keep it forever. It's the nature of the beast, like it or not. The consumer has clearly (by and large) accepted this reality and adjusted to it.

C0deZer0
Oc'D To Rhythm And Police
Premium Member
join:2001-10-03
Tempe, AZ
42.7 11.3

C0deZer0

Premium Member

Re: State of the phones

It's only "gone that way" because every "attempt" to make a modular phone has been so blatantly half-assed at best, and hackneyed at worst.

Every single project that claims to bring true modularity, is then just sat on by some stupid company so we never see it. Worst offender was with Project Ara, and how *effing GOOGLE* bought the project and canned it before we ever got to see any of the product. Damn right I'm still pissed about that.

Quick charging means nothing if the battery doesn't even last 30 minutes. Wireless charging doesn't mean jack if there's no outlets when the thing is dead to use any such charging method(s).

I'm sick of morons who never leave wifi range screwing it up for those of us that actually have to work for a living.

Anon97b40
@2607:fb90.x

Anon97b40

Anon

Re: State of the phones

Even those who work have WiFi in areas that they can use generally. Many companies have byod networks
Tchaika
join:2017-03-20
New Orleans, LA

Tchaika

Member

Re: State of the phones

said by Anon97b40 :

Even those who work have WiFi in areas that they can use generally.

Some of us are smart enough to realize the exposure that comes with using your employer’s WiFi network, even assuming they allow it, which many do not. Mine doesn’t allow it for most employees. I have access — I’m in IT — but I don’t use it for my personal devices. Why would I? It’s subject to monitoring and I pay Verizon for unlimited data.

Only WiFi network I use is the one at home.
ISurfTooMuch
join:2007-04-23
Tuscaloosa, AL

ISurfTooMuch

Member

Re: State of the phones

If you absolutely need to use it, then a VPN is an option. ProtonVPN is now live, so, at least that way your employer won't be able to sniff your traffic.
Tchaika
join:2017-03-20
New Orleans, LA

Tchaika

Member

Re: State of the phones

said by ISurfTooMuch:

If you absolutely need to use it, then a VPN is an option. ProtonVPN is now live, so, at least that way your employer won't be able to sniff your traffic.

Assuming they don't block VPNs. Even so, it's still not my preference. Better to keep separation between work and personal.

juilinsandar
Texas Gooner
Premium Member
join:2000-07-17
San Benito, TX

juilinsandar to C0deZer0

Premium Member

to C0deZer0
Take a look at the LG V20. It's the last flagship phone from LG that has a relplaceable battery and expandable storage. It was released in the fall of 2016, the same year as the galaxy s7. It's got 64gb storage, snapdragon 820 and 4gb ram.

cb14
join:2013-02-04
Miami Beach, FL

cb14

Member

Re: State of the phones

said by juilinsandar:

Take a look at the LG V20. It's the last flagship phone from LG that has a relplaceable battery and expandable storage. It was released in the fall of 2016, the same year as the galaxy s7. It's got 64gb storage, snapdragon 820 and 4gb ram.

Yes. Does not have LTE bands 71 and 66, thus very soon to be obsolete, especially if you have TMUS.
Short of a legislative action which in current political environment is just not coming, planned obsolescence will be increasingly the fact of life.

C0deZer0
Oc'D To Rhythm And Police
Premium Member
join:2001-10-03
Tempe, AZ

C0deZer0

Premium Member

Re: State of the phones

Obsolete, how? Are you saying TMUS would bar phones that don't have these bands?

cb14
join:2013-02-04
Miami Beach, FL

cb14

Member

Re: State of the phones

How? By simply not having the same coverage as the people would have with phones having these bands.

C0deZer0
Oc'D To Rhythm And Police
Premium Member
join:2001-10-03
Tempe, AZ

C0deZer0

Premium Member

Re: State of the phones

Coverage thankfully, wasn't a problem while i was still using the mxpe. The battery first and foremost, was. As well as all the damage created as a result.

juilinsandar
Texas Gooner
Premium Member
join:2000-07-17
San Benito, TX

juilinsandar to cb14

Premium Member

to cb14
The LG V20 is also available on Verizon for those who aren't on T-Mobile. In fact, they're still being sold brand new on Verizons' website,but one can find them used on eBay and other resellers.

Anon97b40
@2607:fb90.x

Anon97b40 to C0deZer0

Anon

to C0deZer0
These breeches are only from one company, TrustWave. If you look at any of the hacks/breaches, every one of those customers are TrustWave customers. See the issue? TrustWave has the problems but everyone still uses them.
sd70mac
Premium Member
join:2015-10-18
Woodstock, IL
Netgear CM1200
Linksys WRT1900ACS
Ooma Telo

sd70mac

Premium Member

Re: State of the phones

said by Anon97b40 :

These breeches are only from one company, TrustWave. If you look at any of the hacks/breaches, every one of those customers are TrustWave customers. See the issue? TrustWave has the problems but everyone still uses them.

I guess the real question needs to be: why do people keep using TrustWave for payment processing?

Anona41e9
@2603:3003.x

Anona41e9

Anon

I've been...

I have only ever used Paypal on Oneplus sites. I have found the credit card system there to be too convoluted. Paypal payments were apparently not affected.

Anon81d64
@2601:443.x

Anon81d64

Anon

Re: I've been...

That might be because you aree typically forwarded to the PayPal site where you have to log in to your account, not directly at Oneplus? So Oneplus isn't saving your PayPal login on their serveers like they do the CC info.
mmmdonuts
anti-media
join:2011-02-28
Raleigh, NC

mmmdonuts to Anona41e9

Member

to Anona41e9
said by Anona41e9 :

I have only ever used Paypal on Oneplus sites. I have found the credit card system there to be too convoluted. Paypal payments were apparently not affected.

That's the way to go. Minimize your CC footprint and use Paypal when possible. If your bank/card issuer supports temporary CC numbers then use those too. Some vendors support Amazon payments even when not buying from the Amazon site. This way you have a few trusted payment options available.

Jim Gurd
Premium Member
join:2000-07-08
Livonia, MI

Jim Gurd

Premium Member

Re: I've been...

said by mmmdonuts:

If your bank/card issuer supports temporary CC numbers then use those too.

^^ This ^^

Both Citibank and Bank of America support virtual account numbers. B of A doesn't promote it and the option is hard to find on their credit card website, but once you find it, it works well.

I use them as often as possible when ordering anything online. If it get stolen, it's useless to a thief because it can only be used once, or with one merchant if you set it up for multiple purchases.
grod46
join:2012-11-25
Fresno, CA

grod46

Member

Re: I've been...

Yep! And here's the link for Citibank »www.cardbenefits.citi.co ··· -Numbers

Works great for me and I never give out my card number out, wish I had it on my other cards.

Jim Gurd
Premium Member
join:2000-07-08
Livonia, MI

Jim Gurd

Premium Member

Re: I've been...

said by grod46:

Works great for me and I never give out my card number out, wish I had it on my other cards.

I can't believe that all card issuers aren't offering this. It's such a great way to prevent card not present fraud. Even those who do, hardly promote its use.
ernestsegui
join:2016-09-09
Lehigh Acres, FL

ernestsegui

Member

Re: I've been...

card numbers arent infinite or random limited pool and the have to be deactivated and put on a inactive list for a set time before they can be used again
said by Jim Gurd:

said by grod46:

Works great for me and I never give out my card number out, wish I had it on my other cards.

I can't believe that all card issuers aren't offering this. It's such a great way to prevent card not present fraud. Even those who do, hardly promote its use.


ilikeme
Premium Member
join:2002-08-27
Stafford, TX

ilikeme to mmmdonuts

Premium Member

to mmmdonuts
I wish Discover still offered the disposable numbers. I used it all the time. I have two Citi cards also and didn’t know they offer it. Will have to check that out.

n2jtx
join:2001-01-13
Glen Head, NY

1 edit

n2jtx to mmmdonuts

Member

to mmmdonuts
said by mmmdonuts:

If your bank/card issuer supports temporary CC numbers then use those too.

I wish mine did. Most have moved away from that model. I used it all the time when Discover supported it. With a 30 day expiration date it was especially useful when buying something where the vendor would "conveniently" sign you up for automatic renewals that you could cancel anytime (if you remembered). Not a problem if the card expired before the renewal kicked in. They came to you asking to renew it at which point you could decline. And if you ignored them you effectively canceled since they could not bill you.

EDIT: Just checked and I see Capital One recently started offering this service through a Chrome browser plugin. I'll have to get it.
sd70mac
Premium Member
join:2015-10-18
Woodstock, IL

sd70mac

Premium Member

Re: I've been...

»Privacy.com offers disposable virtual credit card numbers to people with accounts from most banks.

David
Premium Member
join:2002-05-30
Granite City, IL

David

Premium Member

Re: I've been...

Thank you for that! I am checking that out!
ernestsegui
join:2016-09-09
Lehigh Acres, FL

ernestsegui to Anona41e9

Member

to Anona41e9
if the app was rerouting keylogs of all input on the site there a good chance you paypal email and password is on the list

trparky
CYA! I'm gone!
Premium Member
join:2000-05-24
Cleveland, OH

trparky

Premium Member

Re: I've been...

But that's why you enable Two-Factor authentication that requires you to put in a six digit code that's sent to your phone. The username and password means jack if can't get the unique code.

•••

Tokidoki
Premium Member
join:2002-08-26
South Richmond Hill, NY

Tokidoki to ernestsegui

Premium Member

to ernestsegui
How? You're redirected to Paypal's website. The only time you'd input any email/password is when you login to the oneplus site account. Unless one shares the same credentials between the two sites, the javascript won't pick up your paypal email/pass.
ernestsegui
join:2016-09-09
Lehigh Acres, FL

ernestsegui

Member

Re: I've been...

said by Tokidoki:

How? You're redirected to Paypal's website. The only time you'd input any email/password is when you login to the oneplus site account. Unless one shares the same credentials between the two sites, the javascript won't pick up your paypal email/pass.

yes i figured thats why the paypal customers werent affected because the site redirects to paypal to login but the javascript can be written to forward the link to a fake paypal site where users then enter thier login credentials but i guess luckily wasnt the case this time

this probably wasnt done so it wouldnt be discovered as quickly
your moderator at work
Tch81
join:2015-08-10

Tch81

Member

Fast response

That was quick ! It only took few weeks of people flat out telling them the cards they only used on their website were compromised.

Red Hazard
Premium Member
join:2012-07-21
O Fallon, IL

1 edit

Red Hazard

Premium Member

Discover

I never used that phone but Discover Card sent me an email yesterday indicating that my card may have been compromised and they will be sending me a new one.
remusrm
join:2003-04-07
Frazier Park, CA

remusrm

Member

oneplus spying yet its still purchased?

I've been using a nexbit robin that I got new cheap and installed lineage os on it. Who wants to use OnePlus? Did anyone forget about:

»www.google.com/search?so ··· XuqLXvjw

Defiance
Computer Elite
Premium Member
join:2002-09-11
Minocqua, WI

Defiance

Premium Member

Lawsuit

So how much will they get fined for this breach and how much can customers collect from them for a lawsuit for breaching? They must not have been fully PCI complaint somehow either.
mmmdonuts
anti-media
join:2011-02-28
Raleigh, NC

mmmdonuts

Member

Re: Lawsuit

PCI fines are pretty steep. Then they'll get hit with higher payment processing fees and other banking fees. I don't know how big or healthy One Plus is so this could be a painful nail in their coffin.