fsflover

34 ms·

781.
by fsflover 8mo ago
> running woefully outdated firmware This is just false. Looks like you mix false accusations with reasonable arguments. I still didn't receive any reply concerning the lines of code for the Trusted Computing Base (TCB) of GrapheneO
782.
by fsflover 8mo ago
> Their microphone kill switch also doesn't prevent audio recording. Unless you provide some evidence, I will consider this false accusation. > They aren't open hardware despite many attempts to mislead people with the marke
783.
by fsflover 8mo ago
> Noting that they have deliberately added as little code as possible to dom0 to minimize the risk of introducing bugs or attack surface and quantifying it in service of their point is a sensible way of effectively conveying how they&#x2
784.
by fsflover 8mo ago
> Do you also have thoughts to add or am I supposed to read and respond to 2000 words of material here? The idea is that relatively low specs do not necessarily mean low performance. It depends on the software a lot. For example, SXMo pr
785.
by fsflover 8mo ago
Removing access of users to their device is not security. At least not when users do not want this.
786.
by fsflover 8mo ago
Perhaps you are right, and the hardware attestation is more reliable on a Pixel. However, doesn't it rely on proprietary hardware, unlike Heads? coreboot with Heads is not the same as Qubes AEM. Heads is updated regularly: https:&#x2F
787.
by fsflover 8mo ago
> external hardware key? Yes: https://en.wikipedia.org/wiki/Librem#Librem_Key
788.
by fsflover 8mo ago
I really appreciate your detailed, good-faith responses. > Attempting to compare line counts of 'security-related code' in isolation, if such a thing can even be framed that way, as if that's a useful metric indicates a fu
789.
by fsflover 8mo ago
> "Qubes is great but at the end of the day cannot protect against evil maid attacks to the level that pixel or apple phones can" Yes, it can. Heads, TPM with a hardware key do exactly that, don't they? I'm not sure w
790.
by fsflover 8mo ago
Thanks for your extended reply, but many of your points are strawman. I never suggested that Librem 5 or Pinephone were seriously more secure than GrapheneOS. They may be more secure in small ways, depending on your threat model, like avoid
791.
by fsflover 8mo ago
You're not wrong, but it's probably easier to convince a government to adopt GNU Taler than Monero.
792.
by fsflover 8mo ago
I understand that supporting new phones is a lot of extra work. My only question is whether the developers of GrapheneOS would accept patches from community for such support without full set of security features.
793.
by fsflover 8mo ago
> GrapheneOS always strikes me as "perfect is the enemy of good"... I've been all right with all kinds of Android phones I fully agree with you. I never received a reasonable reply to this from GrapheneOS fans or developer
794.
by fsflover 8mo ago
I do trust my device. However in specific circumstances where privacy may be critical, an additional protection might save me even from a state-sponsored attack.
795.
by fsflover 8mo ago
> haven't found a >=2025 phone Why such a restriction? > or ones with a chipset that would have been considered fast in 2018 https://puri.sm/posts/the-danger-of-focusing-on-specs/ > webcam sticke
796.
Age Signaling and Interface Documentation and Design for Kicksecure(kicksecure.com)
1 points by fsflover 8mo ago|0 comments
797.
by fsflover 8mo ago
> When my current phone dies, I'm basically returning to a dumb phone with a removable battery. Why not a smartphone with the jack, microsd, and a hardware kill switch for camera?
798.
by fsflover 8mo ago
Matrix.
799.
by fsflover 8mo ago
Perhaps you may be interested in Librem 5 or Pinephone, both of which have hardware kill switches for modem and available schematics. The latter even has most of the modem software freed.
800.
by fsflover 8mo ago
Yes, the anonymization is not perfect but it's the best you can get. You don't have to compare your fingerprint with other visitors. Just have a look at the detailed information to understand which things reveal your identity the
801.
by fsflover 8mo ago
But it is a path to it.
802.
by fsflover 8mo ago
Would this work? https://en.wikipedia.org/wiki/GNU_Taler
803.
by fsflover 8mo ago
Fingerprinting can be extremely sophisticated. Have a look at this test: https://coveryourtracks.eff.org/ Only Tor Browser can reliably fight with it.
804.
by fsflover 8mo ago
When you decline, their tracking becomes illegal, so they are constantly in danger of a legal action. It's a good enough reason to declime for me.
805.
by fsflover 8mo ago
> Maybe I am actually naive, but I just have not yet been convinced I should actually care. You are. Tracking is extremely dangerous to the society. Before Shiftkey offers a nurse a shift, it purchases that worker's credit history
806.
by fsflover 8mo ago
It's not just about cookies but also about fingerprinting, which is extremely hard to prevent.
807.
by fsflover 8mo ago
Dupe: https://news.ycombinator.com/item?id=47237018
808.
by fsflover 8mo ago
It's unlikely that they release a new phone soon. They didn't even upstream all drivers for this one yet, and the OS is currently based on an old Debian version: https://forums.puri.sm/t/when-and-how-to-jump-t
809.
by fsflover 8mo ago
It means that banks cannot say "desktop is insecure, therefore a mobile app is required for your security". I can manage my own security in a better way.
810.
by fsflover 8mo ago
Unless you use Qubes OS (which I do).

More ›