How much do ongoing security updates really matter?

Now that the day to day usability difference between iPhone and Androids are negligible (years ago the iPhones were way better, but not anymore), the biggest advantage iPhones have is security updates for many years after the phone comes out, about 7 years at present. Compare this to about 3 years of updates for Android. So, how important are these updates actually? How many people actually get information stolen due to an out of date Android install and what would the attack vector be? I'd make the switch if I could keep it more than 3 fucking years without having to lob it into a ditch and buy another because the security stopped getting updates.

Attached: Android.jpg (768x432, 33.04K)

Other urls found in this thread:

en.wikipedia.org/wiki/Pegasus_(spyware)
myredditvideos.com/
twitter.com/NSFWRedditImage

i still use a blackberry z10 from 2013.

Attached: ifuckonthefirstdate.jpg (680x763, 33.41K)

based, I also open source all my nudes

2013 isn't that long ago, why are you acting like it is?

Pixel 6 has 5 years of security updates
Pretty sure some samsung phones do too

For zoomers, 9 years is an eternity.

>no real answers ITT

So are security updates a meme, then? I can't think of anyone I know of that's had anything stolen or hijacked from them due to outdated security updates. And most breaches seem to happen to up-to-date computers as well as less updated ones.

still using a Moto on 7.1.1
nothing bad has happened (that I know of)

if the updated ones are prone to attacks, i think it's safe to say the less updated ones are too

idk im not an expert

Yeah, but as I said I can't think of anyone that was like "oh my god, my phone got hacked" and it wasn't them idiotically typing their info into a phishing scam or something.

en.wikipedia.org/wiki/Pegasus_(spyware)

So it sounds like it attacked up-to-date phones, making further security updates meaningless because they'll always write it to attack up-to-date phones. Sure, they can attack 5 year out of date phones, but who are they going to get? What world leader will be running around with a super old phone?

Security though obscurity.

>Pegasus is able to exploit iOS versions up to 14.6

>14.6 was current at the time

So, once again, when attacking, they will attack up to date phones. Who's to say they don't have Pegasus 2 on a bunch of phones right now? Also, Pegasus doesn't sound like something that is sent to randos, it sounds like a targeted app sent strictly to key government personnel.

So does anyone actually know shit about this topic or are software updates and security patches just an IT meme that doesn't mean shit?

If you're running outdated software some script kiddie can literally own you with pegasus. It's not like the malware isn't available online.

>the feds will just burst down my door, so I won't bother locking it
lmao enjoy random people walking in

But what are the odds of this actually happening if I'm not a specific target with known valuable data?

People get targeted by malware all the time. You don't need to be important to be targeted, you just need to have a bank account with some money.

0days are hyped. When your software is up to date you would have depth of defenses: When your browser has a vulnerability but your system doesn't allow the sandbox escape then you have stopped the threat. If your browser is vulnerable (not even 0day, well known exploit) and your system is vulnerable (not even 0day, well known exploit), then it would be a good idea not to visit dodgy websites.

I'm in your phone from Russia. See 127.0.0.1 is much my hacker address