5 ms·
Flagship mobile phone with hardware kill switches for privacy
- fcpk 1y agoWonderful except that soon that phone won't work for anything official in europe because it won't pass play integrity attestation that brussels wants to be the only gateway to certification of devices.
- matheusmoreira 1y agoYeah. Remote attestation, "certification" of devices in general, should be illegal. Anything short of that and computer freedom is lost, everything the word "hacker" stands for will be destroyed.
- M95D 1y agoIs it so difficult to have a separate phone for gov & bank apps only?
- zb3 1y agoWe can't let Google get away with bundling their spyware in the name of security into a phone we must now have.. It's NOT ok that a government app (often practically mandatory) requires the user to accept some invasive ToS of a foreign corporation maintaining an illegal monopoly. Requiring attestation doesn't mean Google spyware should be unremovable without breaking it, Google's business model should not be mandated by the law.
- charcircuit 1y agoIt's not a law to only trust Google's attestations.
- matheusmoreira 1y agoIt is however common practice. Why would corporations and governments trust our own keys, signatures and attestations? There's no reason for them to do that. They're going to restrict the set of trusted keys to themselves, thereby maintaining attestation authority. That's how we'll be robbed of our computing freedom. Technically we'll be able to install whatever software we want but they'll be able to detect our "tampering" and discriminate against us based on it. "Tampered" with your computer? Can't access bank accounts, can't access communications applications, can't even play video games or watch films. One day even networking protocols will require corporate or government attestation. Won't even be able to connect to the internet without a corporate owned computer. Can't even read an article on some website. We're going to be marginalized. We're going to be second class citizens of society. The only way to gain access to services is to give up control of our computers to the corporations and governments.
- izacus 1y agoSo is there anyone else out there attesting device firmware and ensuring they're secure?
- M95D 1y agoWhy must it be attested secure?
- lomase 1y agoDifficult? Not at all, but it annoying at least.
- like_any_other 1y agoThe problem is not that it's difficult, the problem is that it makes phones that are not locked against their users commercially dead - a money losing venture for any manufacturer. Because most people simply won't bother with two phones.
- rolph 1y agobut what if,the two phones could be packed into one? it would be a little thicker, you would need 2 of some components. switch between phones like switching workspace?
- netsharc 1y agoHa, a phone with a KVM (1) although without the K or M: https://en.wikipedia.org/wiki/KVM_switch https://en.wikipedia.org/wiki/KVM_switch Or this 90's hardware oddity that combined Mac and PC: https://www.youtube.com/watch?v=a6b4lYOI0GQ https://www.youtube.com/watch?v=a6b4lYOI0GQ (skip to 8:00 to see it in action). I wonder if dual-booting is possible, with the boot-loader loading the bootloader that's been "blessed" by Google's certification priests to boot the "certified virginal" phone.
- xboxnolifes 1y agoyes
- pogue 1y agoIs it possible to spoof/emulate play pass integrity somehow?
- ulrikrasmussen 1y agoNo, not strong integrity, since that depends on hardware secure modules which attest that the software on the phone is signed by Google.
- zb3 1y agoIf GrapheneOS won't plan on supporting that it means it's not as secure as advertised.
- joemazerino 1y agoNo, it means the phone isn't suitable for security maximalists. GrapheneOS doesn't support any hardware except the Pixels.
- Bender 1y agoAnd that's even assuming one cares about the secure enclave. I am not convinced that any phones exist that one can not unlock the enclave via JTAG debugging.
- SoftTalker 1y agoFor most devices, if you have that kind of physical access, and enough technical resources, all bets are off. Most people's threat model doesn't include three-letter-agencies reading their secure enclave. If yours does, you're probably better off not carrying a phone at all.
- matheusmoreira 1y ago> Most people's threat model doesn't include three-letter-agencies reading their secure enclave. Maybe it should. I'm not convinced that we're automatically done for if the NSA, CIA or whatever starts coming after us. That sort of demoralization is probably part of their psychological warfare. The US government is constantly lamenting the fact cryptography has become widespread and regularly attempts to straight up outlaw it. Cryptography is subversive: it has the power to defeat police, judges, spies, governments, militaries. The simple act of encrypting web traffic shifted the landscape to the point governments are stockpiling vulnerabilites to get around the cryptography. The next step is to systematically eliminate these vulnerabilities so that the cryptography cannot be worked around.
- NooneAtAll3 1y ago
- taneliv 1y agoHey, I learned something. I knew of Fairphone, but I didn't know they had kill switches. The device might be out of my budget, but it seems promising.
- euroderf 1y ago> One is a hardware switch that cuts circuit power to the cameras and microphones How great might be the threat of using its speakers as microphones ?
- Anonbrit 1y agoThat would practically certainly require electrical changes, at which point all bets are off anyway
- Imustaskforhelp 1y agoCan you please elaborate as maybe I couldn't understand what you were trying to convey. Thanks in advance!
- bumseltagbaerbi 1y agoBlala, 1k electronics shit that won't potentially do calls reliably or BT with cars etc.
- yjftsjthsd-h 1y ago> shit that won't potentially do calls reliably or BT with cars etc. Based on what? If it's not yet available, how would you be able to tell how well it does calls or BT-pairs with cars?
- kogasa240p 1y agoIs there a headphone jack?
- pogue 1y agoBring back headphone jacks & SD card slots!
- joecool1029 1y agoThe mediatek dimensity means it's sure to barely work on US carriers. They're not written band support anywhere on their 'detailed specs'
- OutOfHere 1y agoIt's a run-of-the-mill pre-sale scam. Post when it's actually available for sale.
- craftkiller 1y agonit: Title inaccurate. There is a single hardware kill switch, not plural. Separately, there is also a software kill switch.