7 ms·
This is great news. Is there sufficient interest in making a secure dumb phone ? If it's cheap enough, I think some people may be interested. The rough design f
by bubblethink 10y ago
This is great news. Is there sufficient interest in making a secure dumb phone ? If it's cheap enough, I think some people may be interested. The rough design for the phone can be something like this: It should not be a real phone. i.e., No baseband or actual cellular connection. It should work only over wifi (ath9k maybe?), and have provisions for always-on TOR/VPN. The rest of the hardware and software can be derived as some combination of Neo900, Replicant and copperheadOS
- unicornporn 10y agoNext problem: Signal will not work without a phone number... I'd vote for https://riot.im/ https://riot.im/ instead.
- mirimir 10y agoCouldn't the phone somehow "pretend" to have a phone number?
- bubblethink 10y agoI think it needs the phone number for verification. The phone number is the identity in Signal (and a lot of other apps these days).
- mirimir 10y agoVerification of what, to whom/what? If you're using WiFi, there's no "phone" anything involved. Or at least, I don't get why there would need to be.
- Paul-ish 10y agoYour messages still go through OWS servers. I believe signal routes messages via phone #. Signal client is open source though, so maybe this is easy to work around.
- gjjrfcbugxbhf 10y agoOWS has specifically said they won't accept federation...
- Paul-ish 10y agoI was more suggesting a separate centralized service that doesn't use phone #s, but true that you still wouldn't be able to use it with standard Signal users.
- bubblethink 10y agoIt's not a technical limitation, just a design decision. Everyone on Signal's network is known by their phone numbers. You cannot pick a username, as such. The phone number is the username.
- mirimir 10y agoI really don't get the point of that. I mean, sure one can get more-or-less anonymous phone numbers. But why create the need for that? There are things like keys for verification :)
- JumpCrisscross 10y ago> I really don't get the point of that To prevent spam and promote discovery. Finding someone on WhatsApp or Signal is easier than on WeChat as with the latter someone might be using a screen name, or an email address or a phone number.
- yorwba 10y agoWhy is it is easier to find someone when you can only use one identifier to find them, instead of several? Note that WeChat also uses phone numbers to limit spam, so you can find anyone if you know their number. (But exchanging QR codes is the preferred method of sharing contact information, to the point where I couldn't call most of my contacts except through WeChat.)
- colordrops 10y agoDiscovery and preventing spam should not take precedence over privacy for an app that supposedly has privacy as its number one priority.
- mirimir 10y agoIndeed. So one must conclude that privacy isn't the top priority.
- 10y ago
- iank10 10y agoYou can use Signal with a VOIP number. Do the one-time registration and that's it. Or you can get yourself an anonymous disposable SIM (unless illegal in your country), register the number and keep hold of the SIM if you need to re-register the number in the future.
- dheera 10y agoI use Twilio when I need to verify phone numbers for stupid apps. Mainly because a great deal of the time don't actually carry a phone around (especially if I am carrying something more computationally powerful than a phone). And I can verify my Twilio phone numbers from anywhere in any country. Can't we kill phones already, please? Identify people by e-mail addresses, which are easier to remember and not tied to countries.
- squarefoot 10y ago> ... The phone number is the identity in Signal (and a lot of other apps these days). Which to me is an incredibly dumb idea since it leaves out WiFi only terminals such as el cheapo tablets but also small embedded boards etc. I know some of these messaging apps can be used on WiFi only devices, but never in an immediate way and I believe you can't use them at the same time, which is very dumb. This also kills any IoT use for instance, where you could make N copies of a Linux image that boots a node, connects through the same user and sends the data available to its IO pins, or accepts commands to drive them in order to turn on or off other appliances.
- bubblethink 10y agoSignal only works on phones and chrome desktop right now. So other devices are anyway out of question. Their goal has always been secure messaging for the masses, and not necessarily secure messaging for everyone and everything under the sun. I think it's a fair trade-off if it helps them get the user base by keeping it simple and similar to WhatsApp. Even in its current form, it's incredible difficult to get people to use it. It would be much worse if it were any more complex UI-wise.
- ReverseCold 10y agoYes, chat needs to not be just basic texting or no one will use it. iOS users get iMessage which is great, but there's no cross platform version. Telegram + Encrypted by default and in groups would be best, but they have some (invalid) reason for keeping it unencrypted.
- Anon1096 10y agoThere's a lot of features Telegram offers that can't be used with e2e encryption. Stuff like link previews and many bot functionalities are things that come to mind that my group uses very frequently.
- a_imho 10y agoI'm sure they would not mind a whatsapp like buyout offer, at least as an option. That, and secure messaging for the masses.
- deleted 10y ago[deleted]
- newman314 10y agoI said this several times but will repeat it here again. I would love a Ricochet/Rio+Signal+Burner combo.
- ReverseCold 10y agoBut none of those are fun to use, let's throw telegram/slack into the mix! Wire is doing a pretty good job of making a fun to use chat interface, but it has its own problems in privacy and speed.
- chc4 10y agoDoes matrix even support end-to-end encryption? Last I checked it didn't have /any/, except maybe server-to-server and even that wasn't enabled. I also seem to remember going over their homebrewed cryptographic rachet and it didn't properly HMAC. EDIT: Apparently riot.im supports E2E, but it's not a part of the Matrix protocol and it's not encrypted by default. The Olm rachet was also audited by NCC, so that's nice.
- jdkfree 10y agoThey have e2e on all devices now.
- feld 10y agoBut still no way to enforce or enable as default.
- Arathorn 10y agoE2E /is/ part of the Matrix protocol - it's just still in beta. The spec PRs haven't landed yet (http://matrix.org/speculator/spec/drafts%252Fe2e/client_server/unstable.html#end-to-end-encryption http://matrix.org/speculator/spec/drafts%252Fe2e/client_serv...). Once out of beta it'll be turned on everywhere by default.
- yagni3 10y agoI'd buy that. I'd go further and say a dumb phone that doesn't allow complex apps would be fine with me too. It has built in apps for a set of open protocols like the web, email, matrix/irc, vcard, ical etc. Updates these apps, but that's all you get. Pushing security on top of the Android ecosystem seems like a lost cause and building something with app ecosystem parity is a pipe dream it seems.
- boondaburrah 10y agoI've been tossing around a design for a "dumbphone" that only has "extensions" rather than apps. You can define feeds of information for it, such as bus schedules, email, and tweets, but that's it. If I can get my soldering up to snuff I may just try to build it.
- nickpsecurity 10y agoMaybe start with one of these... https://hackaday.io/project/19035-zerophone-a-raspberry-pi-smartphone/log/51839-project-description-and-frequently-asked-questions https://hackaday.io/project/19035-zerophone-a-raspberry-pi-s... https://openalia.wordpress.com/2012/06/09/diy-totally-open-source-arduino-gsm-cell-phone-by-zach-wick/ https://openalia.wordpress.com/2012/06/09/diy-totally-open-s... ...then start deleting code out of it, hardening it, and using memory-safe apps. A nice step on the way to a truly, dumb phone that might take a lot of custom work.
- closeparen 10y agoFunny, for me, web, email, chat, calendar, etc. are all superfluous distracting noise. The one thing that keeps me on a smartphone is Google Maps. I have a Garmin for the car, but their public transit directions are difficult to replace.
- jdkfree 10y agoIf you can get transit to release data in a standard protocol, then I think that'd be fine. I would just be afraid of closed devices needing access to closed protocols and APIs. There be dragons. Maybe something like nixOS where the phone's state is the result of a pure derivation. No installing or configuring anything except through a privileged ssh after decryption. Then boot and go again. Only automatically updating is possible from the device proper, rollback on failure.
- twodayslate 10y agoWhy not an iPod?
- farless 10y agoYeah, it's definitely a viable option: https://yawnbox.com/index.php/2015/09/12/how-to-use-an-ipod-touch-as-a-secure-calling-and-messaging-device/ https://yawnbox.com/index.php/2015/09/12/how-to-use-an-ipod-...
- evjim 10y agoI was previously working on an epaper phone project. A minimalist/modern feature phone. Anyway, the company pivoted and has agreed I can open source the hardware. I decided to ditch GSM and just use wifi. I have been thinking it could be a good platform for encrypted messaging using Matrix/Riot. Unfortunately I am not a software developer. If anyone is interested in helping out, let me know. [1] https://github.com/junglejim8/epaper https://github.com/junglejim8/epaper
- JonRB 10y agoThis looks cool. Thanks for linking! What epaper hardware are you using?
- evjim 10y agoSharp memory LCD. It uses a simple SPI interface, can refresh at about 30fps, but has no greyscale unfortunately.
- dejawu 10y ago30 fps is pretty good for an eInk screen, and UI design for a two-tone black or white screen seems like a really interesting challenge. Maybe I should build one of these...
- evjim 10y agoIll be doing a small run of prototypes in about a month. Could assemble one for you if you want to hack on it.
- deleted 10y ago[deleted]
- jonah 10y agoYour cabin project is interesting! Any updates? How's it going? http://woodstead.org/build.html http://woodstead.org/build.html
- jags-v 10y agoabsolutely yes !!!
- hackuser 10y ago> t should not be a real phone. i.e., No baseband or actual cellular connection. Couldn't you use a small tablet?
- bubblethink 10y agoyes, to the extent that you trust the OS and other firmware/drivers/blobs running on the device.
- CommanderData 10y agoIf I recall a true secure phone is difficult. According to a infosec presentation I saw. The problem is the mobile chipsets that are closed making auditing difficult. Most diy mobiles use these chipsets. Further the chips are able to run mini applications and these can be pushed by service providers with no real way preventing it from the OS level.
- bubblethink 10y agoMost of the insecurity stems from the baseband. It's a black box processor with unfettered control. Once you get rid of that, the rest of the hardware is more like a general computer. Getting PCs to work with an entirely free stack is also hard, but tractable. Replicant already does a good job with some old phones.
- mseebach 10y ago> It should not be a real phone. i.e., No baseband or actual cellular connection That's going to severely limit the usability of the device. If you want to make a device for practical security, you'd need to find a way to isolate the mobile network chip. IIRC, better USB 4G dongles are standalone and expose expose either serial interface for PPP or an USB ethernet device, so the attack surface is limited. If you build the phone around the chip from one of these, and make sure all data is VPN'd (and voice is VOIP'd), I think you should be able to contain cellular/baseband related attacks (to be clear, the baseband is still vulnerable, but won't be able to make the jump in the phone proper, and will only be able to see an encrypted data flow).