3 ms·
They're also pretty behind on major OS updates and even bug fixes last I've checked. The software story was very disappointing when I wanted to get one.
by izacus 3mo ago
They're also pretty behind on major OS updates and even bug fixes last I've checked. The software story was very disappointing when I wanted to get one.
- warrantisall 3mo agoHow do they intend to comply with the European CRA act then?
- izacus 3mo agoThat is a question I cannot answer - and CRA is pretty new, so we'll see if anything changes.
- microtonal 3mo agoYep. I was interested in more sovereignty and degoogling to some extend. So I got a Fairphone 6 with /e/OS. It was only until I dug a bit deeper into the OS image and the microG source code that I found worrying things: - Old kernel versions with many known CVEs (applies to both stock an /e/OS). - Old firmware bundles with many known CVEs (applies to both stock an /e/OS). - Old major Android version, so missing fixes for vulnerabilities not marked high/critical (applies to both stock an /e/OS). - Chinese firmware blobs, TCL image processing firmware (applies to both stock an /e/OS). - When using the App Lounge, F-Droid installs go through a proxy (CleanAPK), that Murena does not want to reveal the purpose or owner of. Given Android's trust on first use policy, this could be used to intercept installs and install malicious packages. (/e/OS) - Runs microG privileged. When an app does Google Play Integrity checks, Google's obfuscated DroidGuard blobs run privileged (/e/OS). - Runs many Google apps (e.g. Google Maps) with higher privileges (/e/OS).