Conversation

Jul 15, 2019

Secure mobile phone for sale at DEFCON. Who wants one? A preorder site w/ details will be up shortly, but this is a DEFCON exclusive special. Hardened Android, good hardware, strong crypto and privacy by default. OTA upgrades. Supports FOSS.

Take my money!
21%
Show me the total.
79%

1,743 votesFinal results

110

Natanael, tech custodial engineer

@Natanael_L

Jul 15, 2019

Replying to

@thegrugq

What about basebands? Bluetooth vulnerabilities, etc?

Replying to

and

GrapheneOS is going to be very careful about targeting devices with good hardware and firmware security. It won't support devices without full firmware security updates and a good implementation of security features like IOMMUs, verified boot, attestation and various mitigations.

Replying to

and

There's not much documentation on the site yet, but there's initial section about device support at grapheneos.org/#device-support. The project is currently researching available devices to find the least bad compromise for a low-end device at a cheaper price point than the Pixel 3a.

Replying to

and

It's still going to be expected to meet all of the basic standards, but there will need to be compromises to support a lower-end device. For example, realistically, a low-end device won't have a direct equivalent to the Titan M. Newer devices might start using the SoC SPU though.

3:57 PM · Jul 16, 2019Twitter Web Client

Replying to

and

The Pixel 3a does have comparable security to a Pixel 3 though, so there's no security compromise in that case. Broad device support is explicitly not desired by the project so it doesn't need to find a bunch of good targets, just one or two reasonable lower-end device options.