3 ms·

Right, so you're just going off vague generalizations and possibilities. There's an entire army of people looking for vulnerabilities in this area, and they hav

Right, so you're just going off vague generalizations and possibilities. There's an entire army of people looking for vulnerabilities in this area, and they haven't found any. Until you can show a vulnerability for the devices I mentioned, you don't have much of a point.

fsflover 9mo ago
> and they haven't found any Why are you so sure? Not everybody shares vulnerabilities with the world. Some people keep them for themselves or sell on the black market. I doubt OnePlus offer a reasonable payment for that.
- JCattheATM 9mo ago
  Because it's not a high target device. Valuable targets are not using outdated OnePlus devices. There might not be money to be made, but there is reputation to be earned by discovering a new vulnerability. I doubt a vulnerability in some old 6T hardware would be worth much, while disclosing it and padding a resume would be.
  - fsflover 9mo ago
    People who use non-mainstream systems and rely very little on proprietary software are automatically more interesting. They may have something to hide.
    - JCattheATM 9mo ago
      I think that's a massive case of confirmation bias and exaggeration. People that use GrapheneOS are significantly, substantially more of a target than someone using a librem out of principle. I don't think you have much of a point at all, but I also don't see this discussion going anywhere interesting so I'll leave it at that.
      - fsflover 9mo ago
        > People that use GrapheneOS are significantly, substantially more of a target than someone using a librem out of principle. I don't dispute that. However, if you take into account that Google (who create Pixel devices) is a part of Prism, GrapheneOS users could likely be targeted in another way.
        handedness 9mo ago
        You've made that vague claim a number of times before, and unless I steelman it into being merely handwavy, it comes across as pure FUD. I don't even know where to begin. But next year GrapheneOS will be releasing an OEM phone.

fsflover 9mo ago

> and they haven't found any Why are you so sure? Not everybody shares vulnerabilities with the world. Some people keep them for themselves or sell on the black market. I doubt OnePlus offer a reasonable payment for that.

JCattheATM 9mo ago
Because it's not a high target device. Valuable targets are not using outdated OnePlus devices. There might not be money to be made, but there is reputation to be earned by discovering a new vulnerability. I doubt a vulnerability in some old 6T hardware would be worth much, while disclosing it and padding a resume would be.
- fsflover 9mo ago
  People who use non-mainstream systems and rely very little on proprietary software are automatically more interesting. They may have something to hide.
  - JCattheATM 9mo ago
    I think that's a massive case of confirmation bias and exaggeration. People that use GrapheneOS are significantly, substantially more of a target than someone using a librem out of principle. I don't think you have much of a point at all, but I also don't see this discussion going anywhere interesting so I'll leave it at that.
    - fsflover 9mo ago
      > People that use GrapheneOS are significantly, substantially more of a target than someone using a librem out of principle. I don't dispute that. However, if you take into account that Google (who create Pixel devices) is a part of Prism, GrapheneOS users could likely be targeted in another way.
      - handedness 9mo ago
        You've made that vague claim a number of times before, and unless I steelman it into being merely handwavy, it comes across as pure FUD. I don't even know where to begin. But next year GrapheneOS will be releasing an OEM phone.