things i've learned about purism products in the past day:
- headphone jack can desolder from the motherboard on their laptops (most of which use proprietary Aptio firmware btw)
- librem5 blob CPU nonsense is even worse than originally thought, no tamper protection
Conversation
- purism lies about the capabilities of its products, especially verses competition
- librem5 might be as secure as its competitors phones in a month or two when USBGuard rolls out, but they are worried about regressions
3
6
35
Replying to
I think you're being a bit too charitable with "as secure as its competitors" there. 😅
1
1
4
Replying to
i mean, if i just outright say "purism is a FOSS grift company that does not really give a shit about software freedom or the security of their customers" that might be a little too direct :P
1
1
12
We've gotten so tired of it especially after their attacks on us that we've simply started telling our users that it's a scam. I don't broadcast that to the world but if people ask about it then I'm probably going to describe it that way. I don't expect much to change.
1
6
It's so wrong that an entirely proprietary SoC, radios, etc. get portrayed as open just because the proprietary parts aren't shipped by the OS. It doesn't mean there's less proprietary code or that it's less trusted. It's out of sight, out of mind which is counterproductive.
1
3
I'd much rather have a firmware directory in the OS with all the firmware for components not required to boot the OS. Minimal persistent state, and maximum ability to inspect and control it. Most firmware other than certain misguided secure elements also isn't at all obfuscated.