4 ms·
>On the Android side, you can at least use free and auditable apps from the F-Droid repository, and buy your device from an OEM vendor which will let you unlock
by ummonk 8y ago
>On the Android side, you can at least use free and auditable apps from the F-Droid repository, and buy your device from an OEM vendor which will let you unlock it and install google-free LineageOS.
Do you go audit every line of source code in the apps and OS you install? Do you then verify that the binary blobs you're installing were built from the same source? Do you somehow audit the source for the firmware on your device and verify that that is the firmware installed on your device? What about the hardware, do you audit it?
- zozbot123 8y agoI trust the community (including the security community) to do a better job at this than a handful of proprietary hardware and software vendors. Yes, it would be nice to have more openness on the hardware side too (and the Librem 5 phone is a worthwhile answer to that) but let's focus on the lowest-hanging fruit first.
- scarface74 8y agoHow did that work out for HeartBleed bug that was in open source code for over two years? Even worse, this 11 year old bug in the Linux kernel? https://www.theregister.co.uk/2017/02/23/linux_kernel_gets_patch_against_12yearold_bug/ https://www.theregister.co.uk/2017/02/23/linux_kernel_gets_p...
- bch 8y agoHeartbleed was found and fixed, and diagnostic tools quickly followed. OSS isn’t a panacea, but it’s something, no?
- scarface74 8y agoAfter two years? How is that better than closed source?
- lern_too_spel 8y agoTry 15 years. https://www.v3.co.uk/v3-uk/news/3023669/happy-new-year-heres-a-15-year-old-macos-vulnerability https://www.v3.co.uk/v3-uk/news/3023669/happy-new-year-heres...
- kevin_thibedeau 8y agoLineageOS allows fine grained permission revocation that cuts most of the bullshit.
- FiveSquared 8y agoTruth, LinageOS is Android that the way it’s meant to be!
- est31 8y agoFiltering apps by license is a great filter for intent. There are many reasons people write FLOSS licensed software for, but the fewest include wanting to get your data. For economically thinking professional data collectors who e.g. put some dancing pigs game out to get your contact data, the gaining access to a small population aren't worth the effort of open sourcing. F-Droid also has the concept of antifeatures, which upfront informs users about potentially unwanted behaviour like tracking.