Calyxos Restructuring Involves Multi Month Security Update Delay

Before you make any conclusions about what is necessary for your safety, does your threat model argue in favour of migrating?

Figuring out a simple threat model for yourself might give some more clarity on whether this migrating thing should even be considered to this extend, and what will most likely happen if you didn’t do it.

On way to do it is that you give yourself a number from 1 till 3:

  1. When you are part of the 90% of casual civilians who are extremely low risk for targeted attacks, because they aren’t in any kind of high-stakes position or have a certain identity you need to safekeep from the public eye. They only need to be wary of whole-scale attacks like scamcalls, phishing links etc.

  2. When there is some form of known threat actor that has reasons to target you, and/or you are handling high-stakes sensitive operations on your phone, that also affect others if you were to be compromised by a targeted or non-targeted attack.

  3. You are on major blacklists and intelligence agencies, gangs, or whatever organised group(s) are actively looking for your whereabouts to stop your operations, (think major activists & whistleblowers) and therefore you need fully secure and anonymous environments with whatever you do on your devices.

This is why I think number 2s and 3s should consider but number 1s doesn’t have any significant urgency for it to impact their future safety.