3 ms·

At least with Android you can view and compile/install from source right? I thought that was one of the main benefits of using open source for security; that yo

by rifung 11y ago

At least with Android you can view and compile/install from source right? I thought that was one of the main benefits of using open source for security; that you can both verify the source is secure and also that you can be sure the source you're viewing is being used. I suppose you also need to trust the build system and compilers though.

dogma1138 11y ago
How many companies would (not to mention could) you think buy OEM phones and build their own Android OS from scratch including device specific and baseband drivers? I would bet that it's 0 even government agencies opt-out to certify existing devices. If you work in a place that is too sensitive to accept phones there is a much simpler way to go around it and it's that you aren't allowed to bring in phones into the facility in such cases you usually leave them in a locker at reception. Other policies might only prevent phones from being used in places that deal with sensitive information such as labs and R&D departments or meetings which touch sensitive matters. I've worked at a facility that while allowing phones it didn't allow phones with cameras so around 2009 I still have an old nokia phone which while had a camera initially it was easily removable, if you didn't had a phone without a camera then you could simply do a follow me to your roaming extension before shutting it off. I don't think that any company that sees phone tapping as an actual realistic threat would filter phones based on their manufacturer yet alone the OS, they might issue their own phones which are connected to the companies MDM or require BYOD devices to be pre-screened but saying Android no, iOS yes or vise versa unless it's has to do with specifics like MDM compatibility wouldn't be a realistic scenario.
- mschuster91 11y ago
  > How many companies would (not to mention could) you think buy OEM phones and build their own Android OS from scratch including device specific and baseband drivers? I would bet that it's 0 even government agencies opt-out to certify existing devices. Well, I certainly expect Amazon to be able to do so. Google actually has left them no other choice in the long term than to re-implement everything because a shitload of stuff has been moved into Google Play Services.

by rifung 11y ago

dogma1138 11y ago

How many companies would (not to mention could) you think buy OEM phones and build their own Android OS from scratch including device specific and baseband drivers? I would bet that it's 0 even government agencies opt-out to certify existing devices. If you work in a place that is too sensitive to accept phones there is a much simpler way to go around it and it's that you aren't allowed to bring in phones into the facility in such cases you usually leave them in a locker at reception. Other policies might only prevent phones from being used in places that deal with sensitive information such as labs and R&D departments or meetings which touch sensitive matters. I've worked at a facility that while allowing phones it didn't allow phones with cameras so around 2009 I still have an old nokia phone which while had a camera initially it was easily removable, if you didn't had a phone without a camera then you could simply do a follow me to your roaming extension before shutting it off. I don't think that any company that sees phone tapping as an actual realistic threat would filter phones based on their manufacturer yet alone the OS, they might issue their own phones which are connected to the companies MDM or require BYOD devices to be pre-screened but saying Android no, iOS yes or vise versa unless it's has to do with specifics like MDM compatibility wouldn't be a realistic scenario.

mschuster91 11y ago
> How many companies would (not to mention could) you think buy OEM phones and build their own Android OS from scratch including device specific and baseband drivers? I would bet that it's 0 even government agencies opt-out to certify existing devices. Well, I certainly expect Amazon to be able to do so. Google actually has left them no other choice in the long term than to re-implement everything because a shitload of stuff has been moved into Google Play Services.