Conversation

Months ago my phone died and now I need 1+ man-week to de-backdoor my new Pixel 4. Being mostly phoneless warms me up to a simple device that respects my rights out of the box. Continuing phone detox until I get a Pinephone or Librem 5. I'm done funding #SurveillanceCapitalism twitter.com/ashk4n/status/

This Tweet is unavailable.

This Tweet is from a suspended account. Learn more

Replying to

and

Neither of the devices is open hardware and neither has open firmware, despite misconceptions created by misleading marketing. The Librem 5 is deliberately locked down to prevent updating the firmware. Neither is close to the security requirements for official GrapheneOS support.

Replying to

See grapheneos.org/faq#device-sup for an overview of device support including the requirements for official support. We can't provide official support for insecure devices with vulnerabilities that can't be patched. Similarly, the hardware needs to provide the standard hardware-based

Replying to

security features including the hardware-backed keystores used by the OS and apps, support for real verified boot and attestation, modern mitigations, proper IOMMU integration / setup for the components, hardware key derivation support, Wi-Fi anonymity beyond just MAC rand, etc.

Lance R. Vick ( @lrvick@mastodon.social )

Replying to

and

But to get all those you also have to trust yet another closed stack of components and piles of privileged binary blobs you have to sort through tediously on every single new device. All current options suck in very different ways.

Lance R. Vick ( @lrvick@mastodon.social )

Replying to

If I reduce my scope to only 4 apps I can audit on top of a very minimal OS, then I have something easy to maintain until more open hardware arrives. Or maybe our AOSP approaches get the huge injection of paid cycles they need. I am not sure which fantasy to bet on atm.

Replying to

and

You say "our" but your main "contribution" has been showing up to shit on our work while trying to spread negative spin about it. Not surprised to see you pushing products from untrustworthy, dishonest companies that have done everything they can to misrepresent them as open.

6:25 AM · Apr 15, 2020Twitter Web App