3 ms·

If anyone from Cyanogen is reading this, I'd love to know if you guys have any plans to make CM the most secure OS on the market. I hate to make this into anoth

If anyone from Cyanogen is reading this, I'd love to know if you guys have any plans to make CM the most secure OS on the market. I hate to make this into another NSA thread, but it would be awesome if CM focused on making a phone that I can trust to do my bidding instead of the bidding of some other master that didn't pay for the device in my pocket.

storrgie 13y ago
This is the first thing I started thinking when reading about the news. I have loved CM mainly because it was a way for me to dump the cruft on my device provided by the manufactures. I had high hopes watching things like redphone emerge for the android space. I hope that CM takes this in a direction to implement technologies that may liberate people from the fears of privacy loss.
yareally 13y ago
Moxie Marlinspike is working with them on their implementation of a more secure SMS app[1]. It's based on his previous secure SMS app I believe[2]. While I'm not sure I would use their CM Account¤ (also optional), the source[3] for the website mentioned in the article is up on their Github for anyone to critique. Site repo only appears to be the frontend though. [1] http://www.cyanogenmod.org/blog/cyanogenmod-account http://www.cyanogenmod.org/blog/cyanogenmod-account [2] https://whispersystems.org/ https://whispersystems.org/ [3] https://github.com/CyanogenMod/CMAccountWebsite https://github.com/CyanogenMod/CMAccountWebsite ¤ They're using encryption on the front end in JavaScript and that has me a bit worried if that is what they're solely relying on: https://github.com/CyanogenMod/CMAccountWebsite/tree/master/app/js/vendor/cryptojs https://github.com/CyanogenMod/CMAccountWebsite/tree/master/... http://www.matasano.com/articles/javascript-cryptography/ http://www.matasano.com/articles/javascript-cryptography/ http://rdist.root.org/2010/11/29/final-post-on-javascript-crypto/ http://rdist.root.org/2010/11/29/final-post-on-javascript-cr... https://news.ycombinator.com/item?id=4549504 https://news.ycombinator.com/item?id=4549504 https://news.ycombinator.com/item?id=2933730 https://news.ycombinator.com/item?id=2933730 https://news.ycombinator.com/item?id=2723332 https://news.ycombinator.com/item?id=2723332 https://news.ycombinator.com/item?id=6354883 https://news.ycombinator.com/item?id=6354883
drivebyacct2 13y ago
They already are. Like a week or two after Google release the "Locate My device" feature, the CM guys wired up a similar feature to CM Account that doesn't share your location with ANYONE. It's encrypted all the way from phone to your browser. I think they've pretty laser focused on doing things the "right way" in terms of user privacy/security.
fnordfnordfnord 13y ago
>If anyone from Cyanogen is reading this They are doing an AMA right now. Go tell them.
- spiffytech 13y ago
  http://www.reddit.com/r/IAmA/comments/1mnnc6/we_are_steve_cyanogen_kondik_and_koushik_koush/ http://www.reddit.com/r/IAmA/comments/1mnnc6/we_are_steve_cy...

storrgie 13y ago

This is the first thing I started thinking when reading about the news. I have loved CM mainly because it was a way for me to dump the cruft on my device provided by the manufactures. I had high hopes watching things like redphone emerge for the android space. I hope that CM takes this in a direction to implement technologies that may liberate people from the fears of privacy loss.

yareally 13y ago

Moxie Marlinspike is working with them on their implementation of a more secure SMS app[1]. It's based on his previous secure SMS app I believe[2]. While I'm not sure I would use their CM Account¤ (also optional), the source[3] for the website mentioned in the article is up on their Github for anyone to critique. Site repo only appears to be the frontend though. [1] http://www.cyanogenmod.org/blog/cyanogenmod-account http://www.cyanogenmod.org/blog/cyanogenmod-account [2] https://whispersystems.org/ https://whispersystems.org/ [3] https://github.com/CyanogenMod/CMAccountWebsite https://github.com/CyanogenMod/CMAccountWebsite ¤ They're using encryption on the front end in JavaScript and that has me a bit worried if that is what they're solely relying on: https://github.com/CyanogenMod/CMAccountWebsite/tree/master/app/js/vendor/cryptojs https://github.com/CyanogenMod/CMAccountWebsite/tree/master/... http://www.matasano.com/articles/javascript-cryptography/ http://www.matasano.com/articles/javascript-cryptography/ http://rdist.root.org/2010/11/29/final-post-on-javascript-crypto/ http://rdist.root.org/2010/11/29/final-post-on-javascript-cr... https://news.ycombinator.com/item?id=4549504 https://news.ycombinator.com/item?id=4549504 https://news.ycombinator.com/item?id=2933730 https://news.ycombinator.com/item?id=2933730 https://news.ycombinator.com/item?id=2723332 https://news.ycombinator.com/item?id=2723332 https://news.ycombinator.com/item?id=6354883 https://news.ycombinator.com/item?id=6354883

drivebyacct2 13y ago

They already are. Like a week or two after Google release the "Locate My device" feature, the CM guys wired up a similar feature to CM Account that doesn't share your location with ANYONE. It's encrypted all the way from phone to your browser. I think they've pretty laser focused on doing things the "right way" in terms of user privacy/security.

fnordfnordfnord 13y ago

>If anyone from Cyanogen is reading this They are doing an AMA right now. Go tell them.

spiffytech 13y ago
http://www.reddit.com/r/IAmA/comments/1mnnc6/we_are_steve_cyanogen_kondik_and_koushik_koush/ http://www.reddit.com/r/IAmA/comments/1mnnc6/we_are_steve_cy...