# Vulnerability of having everything on your phone

**URL:** <https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456>\
**Category:** In My Humble Opinion\
**Created:** [December 13, 2022, 3:23pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456 "2022-12-13T15:23:09Z")\
**Posts on this page:** 13\
**Page:** 4

<div class="post-metadata">

**Author:** ![echoreply](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/echoreply/32/3641_2.png) [@echoreply](https://boards.straightdope.com/u/echoreply)\
**Post date:** [December 16, 2022, 10:19pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/61 "2022-12-16T22:19:22Z")

</div>

> [@FairyChatMom](#):
>
> He still doesn’t lock his phone

I really like the fingerprint scanner. For me, it is so fast that when I pickup the phone, it is unlocked by the time I can look at it. I do know some people who claim to have “old fingers where the prints have all worn off.” It’s also a question of threat model. I’m defending against somebody random, like a child who lives in my house, accessing my phone. The government likely can compel me to show them a finger to unlock it.

> [@Dewey\_Finn](#):
>
> That sounds like the sort of electronic trail that the police could use to track them down

In the OP, the police didn’t care.

Also, a reminder for those of you who may think your safe because you don’t have banking apps on your phone. If your phone can access your email, then your phone can probably be used to reset almost all of your passwords. To a thief who knows what they are doing (or who to sell it to), access to an email account may be worth more than just the money in one account.

I’m **not** saying remove all email access from your phone, just to be aware of the vulnerabilities. If your phone is compromised, the _first_ password to change is your email password.

---

<div class="post-metadata">

**Author:** ![DesertDog](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/desertdog/32/11503_2.png) [@DesertDog](https://boards.straightdope.com/u/DesertDog)\
**Post date:** [December 16, 2022, 11:05pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/62 "2022-12-16T23:05:17Z")

</div>

> [@Dewey\_Finn](#):
>
> On the other hand, forcing you to go to an ATM and withdraw cash leaves no trail.

On the gripping hand, most of the ATMs I’ve encountered have a $200 a day limit.

---

<div class="post-metadata">

**Author:** ![doreen](https://avatars.discourse-cdn.com/v4/letter/d/858c86/32.png) [@doreen](https://boards.straightdope.com/u/doreen)\
**Post date:** [December 16, 2022, 11:16pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/63 "2022-12-16T23:16:41Z")

</div>

Where are these ATMs , in banks or in convenience stores? Because I know I can withdraw up to $1000 per day from my checking account and I think my savings account has a separate limit.

---

<div class="post-metadata">

**Author:** ![DesertDog](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/desertdog/32/11503_2.png) [@DesertDog](https://boards.straightdope.com/u/DesertDog)\
**Post date:** [December 16, 2022, 11:34pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/64 "2022-12-16T23:34:29Z")

</div>

I [stand corrected](https://smartasset.com/checking-account/daily-atm-withdrawal-limits-daily-debit-purchase-limits) – inflation strikes. $5,000 is a lot of 20s.

---

<div class="post-metadata">

**Author:** ![Procrustus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/procrustus/32/2994_2.png) [@Procrustus](https://boards.straightdope.com/u/Procrustus)\
**Post date:** [December 16, 2022, 11:38pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/65 "2022-12-16T23:38:41Z")

</div>

> [@DesertDog](#):
>
> $5,000 is a lot of 20s.

The ATMs around here switched to 50s and 100s in the last few years. Or, you can ask for 20s. (even 10s and 5s)

---

<div class="post-metadata">

**Author:** ![Kropotkin](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kropotkin/32/18045_2.png) [@Kropotkin](https://boards.straightdope.com/u/Kropotkin)\
**Post date:** [December 17, 2022, 1:30am UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/66 "2022-12-17T01:30:18Z")

</div>

> [@Machine\_Elf](#):
>
> Came in here to say this. A friend and I wrote our theses 24 years ago, and made frequent backups and backups of our backups. Hard drives fail, laptops get dropped/stolen - and 24 years ago, Zip disks/drives were notorious for frequent failures. Can’t think of a good reason not to have backups of all of one’s precious files, either in the cloud or on a physically isolated/air-gapped drive.

And before that, I knew someone who made 3 copies of his thesis in progress–one typed, 2 carbon copies. As he worked on it, each night he would line up all the original pages, wrap them in tin foil and then plastic, then put them in the freezer compartment of his fridge, on the theory it was the most fireproof place in the apartment. He would then put one copy in the outside mailbox and the other in his locked desk drawer. In the morning he would retrieve everything and get to work, repeating the security precautions at the end of the work day.

---

<div class="post-metadata">

**Author:** ![gnoitall](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gnoitall](https://boards.straightdope.com/u/gnoitall)\
**Post date:** [December 17, 2022, 2:10am UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/67 "2022-12-17T02:10:01Z")

</div>

> [@echoreply](#):
>
> To a thief who knows what they are doing (or who to sell it to), access to an email account may be worth more than just the money in one account.

But that’s a targeted attack, not OP’s random mugger.

---

<div class="post-metadata">

**Author:** ![DesertDog](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/desertdog/32/11503_2.png) [@DesertDog](https://boards.straightdope.com/u/DesertDog)\
**Post date:** [December 17, 2022, 3:51am UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/68 "2022-12-17T03:51:52Z")

</div>

> [@Procrustus](#):
>
> The ATMs around here switched to 50s and 100s in the last few years.

Everything old is new again. The bank I use had 20s and 5s for a year or two after introducing ATMs then dropped the $5 option to offer only $20s.

---

<div class="post-metadata">

**Author:** ![zbuzz](https://avatars.discourse-cdn.com/v4/letter/z/e19b73/32.png) [@zbuzz](https://boards.straightdope.com/u/zbuzz)\
**Post date:** [December 17, 2022, 6:42am UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/69 "2022-12-17T06:42:06Z")

</div>

Muggers forced him to transfer money from his bank app, but didn’t take her laptop because she didn’t have a backup of her thesis. Sure. That makes sense. On every level.

---

<div class="post-metadata">

**Author:** ![Bootb](https://avatars.discourse-cdn.com/v4/letter/b/e19b73/32.png) [@Bootb](https://boards.straightdope.com/u/Bootb)\
**Post date:** [December 17, 2022, 3:33pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/70 "2022-12-17T15:33:30Z")

</div>

> [@Dewey\_Finn](#):
>
> Plus transferring money to someone at gunpoint leaves a paper trail (or really an electronic one). Surely a criminal doesn’t want that?

Your average criminal is not exactly known for well-planned crimes.

---

<div class="post-metadata">

**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\
**Post date:** [December 17, 2022, 4:17pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/71 "2022-12-17T16:17:25Z")

</div>

> [@zbuzz](#):
>
> Muggers forced him to transfer money from his bank app, but didn’t take her laptop because she didn’t have a backup of her thesis. Sure. That makes sense. On every level.

I am not here to figure out the mind of a mugger. The question is about balancing risk vs. convenience of having financial apps on your phone.

---

<div class="post-metadata">

**Author:** ![Wolf333](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wolf333/32/3460_2.png) [@Wolf333](https://boards.straightdope.com/u/Wolf333)\
**Post date:** [December 17, 2022, 5:14pm UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/72 "2022-12-17T17:14:36Z")

</div>

My banking app only allows me to transfer money between accounts. Not very useful unless the thief is easily amused.

My email requires a separate PIN or facial recognition to open.

Even on public wifi, the data between your device and your bank is encrypted. If not, there is an issue with your bank.

---

<div class="post-metadata">

**Author:** ![Spice\_Weasel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spice_weasel/32/5435_2.png) [@Spice\_Weasel](https://boards.straightdope.com/u/Spice_Weasel)\
**Post date:** [December 25, 2022, 1:05am UTC](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456/73 "2022-12-25T01:05:55Z")

</div>

I’m just horrified someone in this day and age didn’t keep a backup of their doctoral thesis.

I have pretty much everything on a cloud somewhere. Sometimes more than one cloud. And a backup service. And occasionally I back up to USB. I’ve had bricked phones and dead hard drives and never lost a thing.

Armed robberies of phones, while scary, are not particularly common relative to hackers, and I believe the best way of dealing with them is to use a password manager and two step verification.

I’m also just very skeptical that a thief could get someone to successfully transfer money with a phone app. If that somehow really did happen it seems like it would be vanishingly rare. Someone committing an armed robbery is probably in a hurry to not get caught. So I wouldn’t worry about that bit too much.

[Previous page](https://boards.straightdope.com/t/vulnerability-of-having-everything-on-your-phone/976456.md?page=3)
