3 ms·

The OS is US based too and they could easily keylog everything. Even if you wipe out the OS for a self-compiled one, there are blobs running full blown OS in th

The OS is US based too and they could easily keylog everything. Even if you wipe out the OS for a self-compiled one, there are blobs running full blown OS in the hardware and it has access to every single hardware resource, good luck getting rid of that one without building your own hardware and drivers from scratch.

zrm 7y ago
> good luck getting rid of that one without building your own hardware and drivers from scratch. For an individual that is obviously infeasible. For the continent of Europe as a whole, it obviously isn't. Why shouldn't they put some money into developing cellphone hardware with open source drivers?
- patrickaljord 7y ago
  The size of the supply chain required for such an endeavor is so huge and spread among various countries and companies worldwide this would be a big task even for the EU. I mean, competing with the like of Broadcom and ARM from scratch. Good luck with that. Even then, the NSA would just need to pay or blackmail a single entity in the supply chain to get their backdoor in there. The EU itself would probably implement their own backdoor. Also open source doesn't mean it will be backdoor free https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_tried_to_backdoor_linux_three_times/ https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_t...
  - zrm 7y ago
    You don't have to refuse to take an ARM license (although RISC-V is also a thing). You may not even have to design your own chips at all -- they could just pay an existing manufacturer for design specifications and then both audit the design and develop and publish open source firmware for it. Supply chain security is an independent problem. First you have to know exactly what the design is supposed to be, only then can you verify that it actually is.

3 ms·

The OS is US based too and they could easily keylog everything. Even if you wipe out the OS for a self-compiled one, there are blobs running full blown OS in th

by patrickaljord 7y ago

zrm 7y ago
> good luck getting rid of that one without building your own hardware and drivers from scratch. For an individual that is obviously infeasible. For the continent of Europe as a whole, it obviously isn't. Why shouldn't they put some money into developing cellphone hardware with open source drivers?
- patrickaljord 7y ago
  The size of the supply chain required for such an endeavor is so huge and spread among various countries and companies worldwide this would be a big task even for the EU. I mean, competing with the like of Broadcom and ARM from scratch. Good luck with that. Even then, the NSA would just need to pay or blackmail a single entity in the supply chain to get their backdoor in there. The EU itself would probably implement their own backdoor. Also open source doesn't mean it will be backdoor free https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_tried_to_backdoor_linux_three_times/ https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_t...
  - zrm 7y ago
    You don't have to refuse to take an ARM license (although RISC-V is also a thing). You may not even have to design your own chips at all -- they could just pay an existing manufacturer for design specifications and then both audit the design and develop and publish open source firmware for it. Supply chain security is an independent problem. First you have to know exactly what the design is supposed to be, only then can you verify that it actually is.