3 ms·
Those blobs, if backdoored, could have massive security implications. Also those blobs are often targeted at specific kernel versions, so in 2 years when the u
by lrvick 3y ago
Those blobs, if backdoored, could have massive security implications.
Also those blobs are often targeted at specific kernel versions, so in 2 years when the upstream vendors stop releasing updated blobs, then it no longer becomes possible to upgrade the kernel, making it very very hard to keep last gen devices secure.
This exact problem is why I was forced to admit there is no secure path to use Android today, and a big reason why I gave up on smartphones entirely.
- fsflover 3y ago> and a big reason why I gave up on smartphones entirely This is not necessary: my Librem 5 doesn't rely on blobs in kernel and runs FSF-endorsed GNU/Linux, PureOS.
- fifteen1506 3y agoPixels may also be an option -- though Librem 5 is, in this context, better. Pixels Pro have now... 7 or 8 years support.
- dawidpotocki 3y agoBecause Purism cheated and just moved the blobs into a chip that you can't update and made it go through a separate processor[1]. FSF-endorsement is meaningless. This is worse than having a loadable blob from a kernel. [1]: https://puri.sm/posts/librem5-solving-the-first-fsf-ryf-hurdle/ https://puri.sm/posts/librem5-solving-the-first-fsf-ryf-hurd...
- fsflover 3y agoI don't see how it's worse. As a consequence, it's the only phone that can run fully free OS and have lifetime updates.
- dawidpotocki 3y agoYou can't update the firmware at all and you are still running it. Librem 5 has very dated hardware that barely runs. It has only Cortex A53 cores @ 1.5 GHz that were released in 2012. You will see it even lag in Purism's videos. Modern Android phones have better OS, hardware security, battery life and will be useful for longer and cheaper. Librem 5 now costs 1000 USD, the same price that Google Pixel 8 Pro costs which also has guaranteed 7 years of OS support. Will you want to use Librem 5 in 7 years? Also let's not forget how Purism took forever to ship the devices and was declining refunds from people that didn't even get sent the device and waited way over a year. Oh and there are Android phones that can run on mainline kernels.
- fsflover 3y ago> Will you want to use Librem 5 in 7 years? Yes: Librem 5 is a full desktop, with my full control, "Thinkpad T400 in mobile". It will always run latest Linux and all desktop apps. I can use it as a full desktop connected to keyboard/screen. On the other hand, Android is not a general purpose computer, which only runs what Google allows you to run. You should try SXMo if you want to see how smoothly Librem 5 and even Pinephone can work if the software is optimized. > You can't update the firmware at all and you are still running it. Is there even theoretically an attack vector here? Yes, Purism has been having problems with refunds. It doesn't affect security or freedom of they devices. Don't buy from them if you will want a refund.
- forty 3y agoHow will you fix it in 4 years? I don't see were they sell spare parts.
- fsflover 3y agoThey don't have spare parts in the online shop, but people on the forum were able to buy them or repair the devices by contacting Purism directly. AFAIK in case of a larger demand, Purism promised to provide spare parts more explicitly.
- HappyDaoDude 3y agoIt is the closest we have to a freedom respecting device. The baseband processor is still a closed blob but it is a lot better than pretty much everything else out there. Maybe Pinephone eventually will get there as well.
- nomel 3y agoAMD and Intel both have their share of proprietary blobs, in their "open source" packages, including microcode. Where do you see a secure path, for any computing, especially high performance?
- yjftsjthsd-h 3y ago> Where do you see a secure path, for any computing, especially high performance? I believe POWER9 is the only modern option that doesn't use blobs? Of course that doesn't remove the possibility of hardware backdoors (nothing does, except maybe an electron microscope and a lot of free time), but that's a higher bar.
- lrvick 3y agoI do in fact have a Power9 workstation next to my desk, though sadly not in use as the biggest security wins for my workflow come from QubesOS which cannot run on Power9, yet.
- AnthonyMouse 3y agoPeople rightly disapprove of the AMD and Intel blobs and do what they can to disable or remove them, but at least those have stable interfaces that don't decay when there is a new kernel version. Basically every x86_64 processor ever made can run the latest version of the Linux kernel. Would that it were for Qualcomm.
- jancsika 3y ago> Also those blobs are often targeted at specific kernel versions, so in 2 years when the upstream vendors stop releasing updated blobs, then it no longer becomes possible to upgrade the kernel, making it very very hard to keep last gen devices secure. Is this true for the blobs in the Snapdragon 8 Gen 3 Mobile Platform?
- surajrmal 3y agoIsn't it true that even if the firmware was open, as long as the hardware is closed it could still be backdoored and doing things you don't want it to? Where do you draw the line?
- fsflover 3y agoYou don't draw the line: you support practical, existing systems that are as open as possible. Also, there is Precursor, which is open hardware.