Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Android Security

Android Phones Will Soon Reboot Themselves After Sitting Unused For 3 Days (arstechnica.com) 93

An anonymous reader shares a report: A silent update rolling out to virtually all Android devices will make your phone more secure, and all you have to do is not touch it for a few days. The new feature implements auto-restart of a locked device, which will keep your personal data more secure. It's coming as part of a Google Play Services update, though, so there's nothing you can do to speed along the process.

Google is preparing to release a new update to Play Services (v25.14), which brings a raft of tweaks and improvements to myriad system features. First spotted by 9to5Google, the update was officially released on April 14, but as with all Play Services updates, it could take a week or more to reach all devices. When 25.14 arrives, Android devices will see a few minor improvements, including prettier settings screens, improved connection with cars and watches, and content previews when using Quick Share.

Android Phones Will Soon Reboot Themselves After Sitting Unused For 3 Days

Comments Filter:
  • by Anonymous Coward
    Will this be done without my consent?
    • Will this be done without my consent?

      One bright side of this is it'll upset whoever is trying to get into the phone without consent.

      • Why? What's the difference between trying to get into a rebooted phone and a non-rebooted phone? In both cases you need to unlock it before you can do anything.
    • Android used to have the feature on by default where it wiped the phone after a number of incorrect patterns. After three times of my toddler getting ahold of my phone and getting it back wiped, I found the feature and turned it off. Whoever decided to enable that by default, I would like to punch in the face as hard as I possibly can.

    • You don't get it. Apple has been doing this for a while, and it was sorely missed from Android phones. "Rebooting" means a thief or the police can't use the phone after that time, because they don't know your password.

      Where Android is ahead of Apple is using accelerometers to log out on sudden acceleration, like when a thief on a bicycle grabs your phone out of your hand.
      • My phone is locked anyway. If it's stolen, they will have to actively keep it engaged because after 30 seconds, my phone locks and you need the pin to get in. Do most people not have auto-lock on their phone? Pretty sure some apps require this to function. I'm near positive one of those *Pay services required it. Hard to remember, I almost never use *pay apps since I always have my CC and wallet on me. I figure, not using those *pay apps means one less entity knowing about my financial purchases. It's bad e

    • Upon reflection, I would NOT chip in to support this feature, and if I was given the freedom to choose a smartphone without the auto-reboot feature I would pick that smartphone over an otherwise similar smartphone. Of course ceteris is never paribus, but... (I actually suspect Samsung already implemented such a feature, but either didn't want to say anything about it or I missed the announcement.)

      Counterexample: A feature that should properly be implemented at the OS level would be better battery management

  • by The-Ixian ( 168184 ) on Tuesday April 15, 2025 @12:49PM (#65307885)

    They had an automated reboot built in for a long time that you could enable, but then, at some point, they removed the feature, at least from their Pixel phones. Now, all of a sudden it's a good idea again when they realized that it improves security against phone theft scenarios.

    Hopefully they will also allow us to schedule our reboots again too.

    • by Anonymous Coward

      You mean, the police seize the phone. (Which I agree is "theft" but not how most people understand the word.) Run of the mill criminals don't have the tools to get into a locked phone, nor do they care. They just sell the phones to be disassembled and scrapped for parts. The police need time to hack into the phone and it's much harder to hack into the phone once it's rebooted because there's nothing in cleartext in memory.

      If a criminal wants to use your phone's contents he just yanks it out of your hands an

      • I was including police seizure in my "theft" term.

        • by gweihir ( 88907 )

          I was including police seizure in my "theft" term.

          As it should be. Theft is "removal from you posession against your will". It is a form of attack. Does not matter what some words on some paper say.

      • by Rujiel ( 1632063 )
        I was hoping that this is the reason, but it seems a little altruistic for google doesn't it? If it's for addressing standard theft, that would mean less support needs to be provided by telecos. If it's police theft, the liability for google doesn't increase if the police have more access. Either way I don't see how google benefits other than being able to market it as more secure.
        • by gweihir ( 88907 )

          My guess is phones are stolen often enough in some regions that people buy 2nd hand or cheap or stop buying smart phones. And that is something Google would have a stake in.

    • by gweihir ( 88907 )

      Indeed. This is likely a good idea regarding security. I would want to be able to set it to 24h though or even lower.

  • Such innovation /s (Score:5, Informative)

    by Mirnotoriety ( 10462951 ) on Tuesday April 15, 2025 @12:55PM (#65307901)
    -- get.idletime.sh --

    #!/bin/bash

    # Get the idle time in milliseconds
    idle_time=$(xprintidle)

    # If the idle time is more than 3 days (259200000 ms), reboot
    if [ "$idle_time" -gt 259200000 ]; then
    echo "System has been inactive for 3 days. Rebooting now..." | mail -s "Rebooting due to inactivity" user@example.com
    sudo reboot
    fi

    -- crontab --

    # Run script every hour

    0 * * * * /path/to/check_inactivity.sh
    • Re:title You didn't think of it until someone just mentioned it. It's easy to implement someone else's ideas. It's also easy to shit on them. What original ideas have you come up with recently?

      • The xprintidle utility, written by Joachim Breitner in 2001, measures user idle time by tracking the duration since the last input event, like a mouse move or keyboard press.

        The crontab utility, was written in 1975 by Ken Thompson and Brian W. Kernighan at AT&T Bell Labs for the Unix operating system.

        Bash (Bourne Again Shell) was written in 1987 by Brian Fox.
  • by LeadGeek ( 3018497 ) on Tuesday April 15, 2025 @12:57PM (#65307907)
    How about having the fingerprint unlock utility allow for the registration of immediate shutdown (maybe even wipe) finger prints? Maybe be able to configure 1 to unlock and 9 to wipe. Feeling lucky? Legally I have no clue how it would stand up in court, that's not my profession, but it would provide a technical anti-coercion tool.
    • Every phone these days should have a 'witness' function that activates recording to the cloud destination of your choice, from a lock screen. Just why not? Make sure everyone, everywhere can immediately start recording something that can't be confiscated or destroyed immediately.

      The next item should be a 'wipe on secondary password'. A nice background wipe that opens to a default phone while wiping the normal partition in the background. And that ought to come with an automatic pre-programmed SMS, email

      • Just why not?

        Because then anyone who grabs your phone can rake up a massive net, roaming, or cloud bill for you. That said, most phones already let you take a picture/video from the lock screen. I don't know if long videos are streamed to cloud backups, but I'm sure any photos get there fairly quickly. So the feature kind of already exists.

        As nice as that wipe feature would be for security, destruction of evidence is a crime so using that feature when detained by police would be a crime.

        • Three lock screen codes - one for unlocking, one for the witness function, and one for the discrete wipe.

          As for 'destruction of evidence'... sure. But the whole point is plausible deniability. "I didn't wipe my phone, I just never configured it after I bought it". If you're in a place where that doesn't work in court, you're already fucked enough that you probably want the phone contents deleted regardless.

      • While that sounds great and all (it really does!) it sounds like something you would only fine in an open source phone not controlled by a corporation or you would be CIA or some spy that needs upmost security for their device.

      • by AmiMoJo ( 196126 )

        Android has something like that. If you press the power button 5 times rapidly, you get emergency mode. You can configure it to record video, which is protected from deletion and uploaded to the cloud if network access is available. You can also send text messages to contacts, call emergency services, that sort of thing.

        If you want to power the phone off, hold the power button down. Eventually it will force it to turn off.

        Note that manufacturers can change how this works, so check your specific device.

    • by gweihir ( 88907 )

      That is a really bad idea. I often get the fingerprint reades to try to recognize the wrong finger by accident.

  • I need to check, but that stuff was one of the first things I disabled on my new phone last year.
    I install the few programs I use either manually or via F-Droid.

  • Yet another reason not to have Google play on your phone.

  • by darkain ( 749283 ) on Tuesday April 15, 2025 @01:06PM (#65307943) Homepage

    While I do understand this from a security perspective, since a fresh boot requires fingerprint or pin to decrypt the main system's user contents.

    This needs to be OPTIONAL.

    Why? Well, not every Android phone needs this type of security. For instance, I take used Android phones, put a data-only SIM card into them, plug them into a router, enable USB Tethering, and use them as internet backups. Main fiber/cable internet goes out? Router automatically routes over the USB connection. Or alternatively, I have some that run a VPN endpoint and are strictly used for out-of-band management in remote sites.

    Phone reboots? Tethering is off. That simple. It breaks this entire setup. (Yes, I know, "buy something else" - great answer when this ALREADY worked, and was a great way to recycle old phones when pulling them out of service)

    • well an real cell modem does not have an battery time bomb that can blow

    • by Tyr07 ( 8900565 )

      I really do suspect ulterior motives in this. They're covering the ulterior motive with 'for your security'. It's entirely possible that android phones are being used in ways they don't like, where it's not a use constantly making sure they can collect data, and they want to make them more inconvenient for that purpose so it doesn't intrude on their data collection. It could be also that their data collection processes get stuck or things like that.

      • not a use constantly making sure they can collect data

        Well if they implement it like Apple does updates, it'll reset some of your settings in order to enable better data mining. Aka, installing an iPhone update re-enables bluetooth. I wouldn't be surprised if Apple/Google starts re-enabling things like that on reboot if they don't already.

        Though if a reboot take out RAM only viruses, then there's less of a chance of bad news stories about botnets taking over Android phones.

    • since a fresh boot requires fingerprint or pin to decrypt the main system's user contents.

      You miss the point of this. A fresh reboot requires the PIN or pattern to be entered to unlock it. A fingerprint won't work.

      Your fingerprints can be used to unlock a phone without your consent. The PIN or pattern requires consent (perhaps forced) and may be a violation of the 4th and/or 5th amendments if you are forced to reveal your code to law enforcement.

      You should be using a dedicated WiFi hotpot device if you regularly need unattended hotspot capability for more than a day or two.

      • My phone's hotspot was a nice stand in for a year for me when I was refusing to pay for cable service. It was just barely good enough. When I went back to school, I decided a higher speed, more stable link, was required and I don't regret it. I am still annoyed at the cost of the cheapest plan, but whatever. I have 4 different ISP options and yet, for some reason *right...* the cheapest plans all start around $50. Gee, how convenient for industry. No collusion here. nope no sir.

        I dread to think how bad it i

    • Well, not every Android phone needs this type of security.

      Actually they do. Even the most benign use of an Android phone these days involves sensitive information, often financial.

      For instance, I take used Android phones, put a data-only SIM card into them, plug them into a router, enable USB Tethering, and use them as internet backups.

      Those are no longer phones. They are whatever Frankenstein's monster you hacked together. You're very unique here. Please don't call what you are doing a "phone".

      • If that's the case, then he shouldn't be getting forced updates for his Not-phone. That should also be a feature to disable if one wants to. It's my device after all.

  • Pure android is a made up dis by apple fanboys, a lot of new android features were on Samsung devices first then in cooperated into android, this and multitasking/multi-windows

  • Though then again, my phone isn't Android ...

    I use my phone as a phone, not all that other stuff. (I have a tablet for that.) So it isn't strange for me to not use it for a week. Rebooting would actually mean using the battery more. And any limits on what time of day it does this? If it happens just before someone decides to call me (not likely obviously, but not impossible) or need to make one myself.

    A better choice would be to reboot when it is charging, as you're unlikely to suddenly want it then. Or ins

  • The time period should be much shorter, like 12 hours.

    • >"The time period should be much shorter, like 12 hours."

      The whole concept should be optional.
      The time period should also be a user setting.

      These types of mandates without user control are beyond frustrating. It is bad enough to make a change and default/opt people into it. That I can excuse for many things, especially if it is for security. But to not even allow control at all is hostile.

      Also, not everything Android is a "phone." For example, I have tablets that are not used for several days, and I

  • by eclectro ( 227083 ) on Tuesday April 15, 2025 @02:35PM (#65308199)

    Which part of the Android OS is less secure? The Linux underbelly running things? Or the Android gui on top of the Linux kernel?

    Asking for a friend.

    • The user installing things. The police actively attempting to extract data from it. How often have you been asked to hand over your Linux computer when pulled over by the police in a hostile country (like the USA)?

      Android isn't less secure, it's higher risk due to being more actively and frequently targeted.

      • No cop has ever asked me for my phone during a traffic stop. Of course, I haven't been pulled over in 5 years, so maybe things are different. Why would someone hand over their phone for a traffic stop anyway? I mean, it's in my pocket since I'm driving and don't even need it at that time.

        I can't possibly see how they would have any reason to even ask. I'd just say no. It's locked and it's a traffic stop...

        Though I am very boring. You could dump the contents of my phone and my entire car and would be sorely

  • Backup current version (25.13) using whatever tool you choose. Then if you get the update, replace it back with the older version.
  • How long until this "helpful" feature gets a "helpful" update allowing LEOs and national intelligence to bypass it?
  • So, The tables I have mounted on the wall with my home assistant dashboard will start rebooting themselves three days because noone has touched them? Brilliant solution looking for a problem.
  • Work Phone, long weekend...

    Easter is coming up.

    (In some countries at least, that's a long weekend.)

    Personal Phone, it means you're dead (I guess I have been watching to many crime dramas)

    • I mean, if someone I know hasn't responded to me in 3 days, I would be rather concerned for their safety. A day later? Sure, even two but I've never seen three unless I was told ahead of time. For instance, my parents went on a cruise and reception can be non-existent sometimes.

  • Huh, security (Score:2, Interesting)

    by Anonymous Coward
    I remember when Windows used to reboot ~24 days because its 31 bit timer overflowed and panicked the system. I don't think anyone thought, "wow, this is a great thing for security" back then.
  • MS Windows has been randomly rebooting and kicking out hackers for more than 3 decades. It will also taunt the hackers with a blue screen with indecipherable/misleading reasons for the reboot

Wishing without work is like fishing without bait. -- Frank Tyger

Working...