In recent interviews, I've gotten questions over if or how I use a smartphone. They're so dangerous for someone like me, so it's quite difficult to give an in-depth answer. But I published a paper with a few years ago discussing some risks:
Conversation
Phone security has been something I've struggled with for a long time. I once spoke with 's about how it's possible to physically remove internal microphones and cameras from a phone, but even that only mitigates a portion of the threat.
32
613
1,837
But as long as your phone is turned on, even with "location permissions" disabled, the radios in the phone that connect it to all the nice things you like are screaming into the air, reporting your presence to nearby cell towers, which then create records that are kept forever.
70
974
2,282
Software is equally important. The iOS and Android operating systems that run on nearly every smartphone conceal uncountable numbers of programming flaws, known as security vulnerabilities, that mean common apps like iMessage or web browsers become dangerous: you can be hacked.
33
521
1,633
If I were configuring a smartphone today, I'd use 's as the base operating system. I'd desolder the microphones and keep the radios (cellular, wifi, and bluetooth) turned off when I didn't need them. I would route traffic through the network.
75
1,041
2,904
We are nearly exactly that with Ubuntu Touch on PinePhone... maybe the best viable option you can buy today.
1
6
23
Making dishonest comparisons and misleading people about the state of privacy/security is a bad look. It's a clear pattern for the people involved in your project, which is quite sad. Maybe promote your work without dishonest comparisons to others doing something much different.
1
1
1
(1/2) How is it dishonest? The fact is that the pinephone will have physical kill switches and separated modem. And with no binary blobs using malinline kernel. With full open source gnu/linux stack.
2
2
I'm responding to the repeated dishonest attacks and misinformation from developers. You're continuing that here. You're doing it even in your current comment, where you falsely imply that the modem is not isolated on the current GrapheneOS targets and lying about blobs.
1
You also imply that a completely proprietary ARM SoC, Wi-Fi, baseband and tons of other proprietary hardware has no binary blobs which is clearly untrue. Not shipping updates for firmware doesn't mean firmware isn't present, but it would mean it lacks crucial security updates.
1
You're also going out of your way to latch onto posts about something else with misinformation / spin falsely claiming that something drastically rolling back OS privacy and security is on the same level or an improvement. You're making incessant dishonest and unprovoked attacks.
If you don't want to be called out for it, stop being dishonest scumbags and trying to build yourself up by tearing other people down with your dishonest claims. I've never done anything to attack you, but in the past few days you've started spreading attacks / misinformation.
1
The is yet another occurrence in the past several days, and it hasn't been an issue before. I'm curious about what has changed that has driven you to start spreading lies on posts about what I've been working on for over 5 years. Why don't you just go away and leave me in peace?
1
Show replies



