3 ms·

stop using and promoting linux phones https://madaidans-insecurities.github.io/linux-phones.html https://madaidans-insecurities.github.io/linux-phones.html

• rsolva 3y ago
  Thanks for providing a nice list of security drawbacks for Linux phones. Nice to have them all gathered in one place :) However, I did not buy my Librem 5 to get a phone with feature parity with Android or iOS, I wanted a hackable phone that behaves more like my other devices running Linux and to support a future where users have the option to control and inspect their phones. I'm following Fedoras efforts of making an immutable base system for the Librem 5 with great interest. I believe their approach will address at least some of your security concerns.
  • akioni 3y ago
    I use silverblue. It does nothing to address the concerns listed in the article.
    • rsolva 3y ago
      Does Fedora/Silverblue have the same security problems (not applying exec-shield patch, disabling kexec etc) as PureOS does?
      • akioni 3y ago
        The article is somewhat poorly written despite making salient points. The core point is this part: > There is not yet a single Linux phone with a sane security model. They do not have modern security features, such as full system MAC policies, verified boot, strong app sandboxing, modern exploit mitigations and so on, which modern Android phones already deploy. The example about PureOS is that their hardening is minimal even for desktop linux, let alone for mobile. If you wanted to harden linux well enough to be on par with android, you would end up with android. That's the core point. More info: https://madaidans-insecurities.github.io/android.html https://madaidans-insecurities.github.io/android.html Any mention of silverblue/immutability is not relevant here. It has nothing to do with the above concerns.