3 ms·
I suppose it depends on what standards each of these Linux phone implementations have followed. Android also runs Linux, but they modified it to give the wirel
by LinuxBender 5y ago
I suppose it depends on what standards each of these Linux phone implementations have followed. Android also runs Linux, but they modified it to give the wireless providers and Google full control, hence people wanting to root their phones. Just running Linux is not enough to give me confidence that the phone is truly isolated from network management. So I suppose it comes down to what kernel modules, libraries and trust these phones are giving to the provider and what standards they are following. A good start would be independent kernel hackers digging into the hardware and OS to see what they can make the phone do and what they see the phone doing under normal operations when attaching to the network and how the phone responds to OTA update attempts and what the firmware on the phone is doing. If I control the firmware and you control the OS, I control what your OS can read and write to. So I suppose my unanswered questions are:
- Who writes and maintains the firmware the OS is running on.
- Who writes and maintains the modem firmware and who can update it.
- Who can update that firmware for the board the OS is running on. This could be a different answer than who initially creates it for the retail distribution of the phone.
- What level of trust has been inserted into the OS by kernel modules and who maintains those kernel modules.
- What control is given to the end user to see what those modules are doing and limit what they can do.
I suspect more questions could arise as kernel hackers audited the phone. The dilemma I see is that such kernel hackers won't be interested until those phones are wildly popular. The only other way to get their interest is with money.
- fsflover 5y ago> Who writes and maintains the firmware the OS is running on Both Librem 5 and Pinephone run FLOSS operating systems with software maintained by Purism and community. The latter smartphone has two firmware blobs in kernel for WiFi/Bluetooth AFAIK: https://www.pine64.org/2020/01/24/setting-the-record-straight-pinephone-misconceptions/ https://www.pine64.org/2020/01/24/setting-the-record-straigh.... > Who writes and maintains the modem firmware and who can update it. See my link above concerning the Pinephone modem. It's software can be updated by the OS. AFAIK it's the same for Librem 5. > Who can update that firmware for the board the OS is running on. See the first answer. Librem 5 is going to get FSF certification "Respects Your Freedom". Proprietary software only runs on the modem and WiFi card. See also: https://puri.sm/posts/librem5-solving-the-first-fsf-ryf-hurdle/ https://puri.sm/posts/librem5-solving-the-first-fsf-ryf-hurd.... > What level of trust has been inserted into the OS by kernel modules and who maintains those kernel modules. I am not knowledgeable enough to answer that. Maybe the schematics linked above could help you. > What control is given to the end user to see what those modules are doing and limit what they can do. User has full control. This is a selling point of Purism the company: https://source.puri.sm/Librem5/community-wiki/-/wikis/Frequently-Asked-Questions#43-how-secure-is-the-librem-5-compared-to-an-android-phone https://source.puri.sm/Librem5/community-wiki/-/wikis/Freque...