Conversation

I'd love Android VMs directly in Qubes because I could: - use Signal, Wire, etc. on my computer without having to use electron - use mobile apps anonymously (set netvm to sys-whonix) without relying on Orbot/OpenVPN Connect - have as many compartmentalized Androids as I want

Quote Tweet

Daniel Micay

@DanielMicay

Oct 3, 2018

I've received initial funding for continuing my privacy and security work. The development time based on this funding will be split between my hardened malloc implementation (github.com/AndroidHardeni) and a new project aiming to implement first class Android support for QubesOS.

Show this thread

121

419

Replying to

Have you considered supporting

@FlatpakApps

and using the Signal desktop client in the flatpak sandbox for free? flathub.org/apps/details/o

Replying to

and

The desktop app is substantially less secure than the Android app which is an issue even if it's contained in a dedicated QubesOS AppVM and/or another sandbox. An attacker able to compromise it would still be able to get the conversation logs and be able to send/receive messages.

5:13 PM · Oct 5, 2018Twitter Web Client

Replying to

Electron is an awful fit for anything security aware. It isn't how they chose to write it but they got pushed towards it when Chrome app support was dropped. Making it for the web platform which has pervasive dynamic code execution bugs was a bad idea in the first place though.