3 ms·
Though I'm not sure it's even worth trying to bring up in the opinion filled noise of these threads, there is no way to secure current generation mobile devices
by mentat 11y ago
Though I'm not sure it's even worth trying to bring up in the opinion filled noise of these threads, there is no way to secure current generation mobile devices sufficiently to withstand nation-state attackers. Full stop.
The processors, basebands, MMUs, all of them lack the tools necessary to create a chain of trust with also sufficient isolation at the application level to run normal applications. When everyone is saying "of course the FBI could get into the terrorist cellphone, just take it to TAO," this same thing applies to Blackberries and Android phones when applied by opposite numbers in China or Russia.
It is not possible to secure a mobile device from a nation-state attacker due (at least) to gaps in the hardware capabilities
- visarga 11y agoAlso, it's not ok to use a phone that doesn't get regular security updates, but that means you have to trust the phone manufacturer or set up a team of experts to monitor each and every update. Can't trust the hardware, can't trust the software. How can this device be ok to be used by a state official?