3 ms·

Can anyone comment on the Blackberry Priv? The article mentioned it, and I know their security goes down to hardware level and what they claim is a secure manuf

Can anyone comment on the Blackberry Priv? The article mentioned it, and I know their security goes down to hardware level and what they claim is a secure manufacturing process, but all I know is what they claim ...

jevinskie 10y ago
I purchased one used, mostly to see what it is like but also to have as a backup phone Just In Case. The hardware is a mixed bag: the screen is gorgeous, the keyboard is a bit narrow but allows for very accurate typing, the back of the case is flimsy, and the CPU is underwhelming. The software is great though! You get a very up to date (second only to Google brand phones w.r.t. security updates) OS and the Blackberry software (like Hub) is an actual improvement over the stock Android experience. Basically, if you want a secure Android phone and wouldn't mind trading older hardware for a physical keyboard, it is the phone for you. Otherwise, you might want to look at a Pixel device. As to security at the hardware level, I'm not aware of the PRIV featuring anything special outside of the TrustZone TEE stuff that most recent Android phones have.
- hackuser 10y ago
  I found some notes from when I was looking into the Priv at the end of last year. They lack detail, but maybe are a good starting point for someone. * Root of trust: unique crypto keys at the hardware level: Somehow implemented in way that guarantees Blackberry through supply chain, they claim. Maybe Blackerry supplies own chipset, w/ key included? * Verified Boot and Secure Bootchain: Verifies integrity of all layers, from hardware to software. Uses hashes, crypto signatures * hardened Linux kernel with numerous patches and configuration changes to improve security * FIPS 140-2 compliant full disk encryption for data and applications * Monthly updates through the Google Play store (only?) * DTEK: "a single dashboard to monitor and control application access to your microphone, camera, location and personal information." * Can customize each app's privacy settings, like in Android 6 Also of potential interest, from a competitor: * http://www.tomshardware.com/news/copperhead-nexus-more-secure-priv,30565.html http://www.tomshardware.com/news/copperhead-nexus-more-secur... ---- Sources: * http://blogs.blackberry.com/2015/10/priv-is-for-private-how-blackberry-secures-the-android-platform/ http://blogs.blackberry.com/2015/10/priv-is-for-private-how-... * http://www.zdnet.com/article/the-many-ways-blackberry-beefs-up-android-security-on-the-priv/ http://www.zdnet.com/article/the-many-ways-blackberry-beefs-...

jevinskie 10y ago

I purchased one used, mostly to see what it is like but also to have as a backup phone Just In Case. The hardware is a mixed bag: the screen is gorgeous, the keyboard is a bit narrow but allows for very accurate typing, the back of the case is flimsy, and the CPU is underwhelming. The software is great though! You get a very up to date (second only to Google brand phones w.r.t. security updates) OS and the Blackberry software (like Hub) is an actual improvement over the stock Android experience. Basically, if you want a secure Android phone and wouldn't mind trading older hardware for a physical keyboard, it is the phone for you. Otherwise, you might want to look at a Pixel device. As to security at the hardware level, I'm not aware of the PRIV featuring anything special outside of the TrustZone TEE stuff that most recent Android phones have.

hackuser 10y ago
I found some notes from when I was looking into the Priv at the end of last year. They lack detail, but maybe are a good starting point for someone. * Root of trust: unique crypto keys at the hardware level: Somehow implemented in way that guarantees Blackberry through supply chain, they claim. Maybe Blackerry supplies own chipset, w/ key included? * Verified Boot and Secure Bootchain: Verifies integrity of all layers, from hardware to software. Uses hashes, crypto signatures * hardened Linux kernel with numerous patches and configuration changes to improve security * FIPS 140-2 compliant full disk encryption for data and applications * Monthly updates through the Google Play store (only?) * DTEK: "a single dashboard to monitor and control application access to your microphone, camera, location and personal information." * Can customize each app's privacy settings, like in Android 6 Also of potential interest, from a competitor: * http://www.tomshardware.com/news/copperhead-nexus-more-secure-priv,30565.html http://www.tomshardware.com/news/copperhead-nexus-more-secur... ---- Sources: * http://blogs.blackberry.com/2015/10/priv-is-for-private-how-blackberry-secures-the-android-platform/ http://blogs.blackberry.com/2015/10/priv-is-for-private-how-... * http://www.zdnet.com/article/the-many-ways-blackberry-beefs-up-android-security-on-the-priv/ http://www.zdnet.com/article/the-many-ways-blackberry-beefs-...