Viewing profile — summm

Can you recommend some?

I think Meneth was basically correct but a bit imprecise: Boot integrity itself is only user respectful as long as the user can freely decide and change the integrity reference val…

So now you have the choice between two approved ROMs. Not a lot of improvement? And as soon as GrapheneOS implements something beneficial to the users that the government does not …

No, this would just require a publicly verifyable signature of the software, and the user would just choose to have their operating system verify it. No remote attestation or other…

Nope. It is still not possible to give someone else (the government, or the bank) control over your phone while at the same time run software that you alone control with higher pri…

My opinion: Any kind of attestation that is delivered to a non-user-controlled server about the state of a user's end device that the user (possibly using means outside of the end …

The GrapheneOS supporters are not on our sides, apparently. The seem to actually like remote attestation. They just don't like that they are not in on Play Integrity. But what is w…

Depends. In some sense EU companies are quite afraid of the GDPR. Privacy is used in a twisted way in that argument: if any privacy relevant data is exposed to another party, and t…

They already add cryptographic authentication to some CAN messages, so you can't change them. It is only a matter of time until they add encryption. This is mostly a corporate prob…

Only "open" in a twisted sense, and definitely not user-controlled: Remote attestation per definition means to accept only pre-approved operating systems. If anybody builds an impl…

Their security model requires remote attestation. So, open, user-controlled platforms cannot be used. Of course some other future locked-down linux-based OS might be usable.

Another "blog" that doesn't even offer an RSS or Atom feed...

Yeah but many devices still do not support it, and if they support it, then badly, or they hide it. There is not even a USB-Bluetooth adapter that would enable LE Audio on Linux. (…

In other news: "Unified Torment Nexus: open-source alternative to Google Torment Nexus" See also https://grapheneos.social/@GrapheneOS/116200110686604617

Microwaves are a bad example. The cheaper ones are white labels basically all made in the same factory in China. The customer has no way to know if the slightly more expensive one …

Motorola omitted a magnetometer in some of their models. This was especially heinous as the "compass needle" can be emulated to some degree by fusion if gps and rotation/accelerati…

In fact Motorola did the opposite: they recently announced that in their opinion they found a loophole in the EU ecodesign regulation that they will exploit in order to not provide…

Motorola, the one company that still tries to evade the EU ecodesign regulations? Other vendors just provide the required 5+ years of updates, but Motorola loudly and publicity ann…

They actually already do in the EUDI wallet reference implementation. There, as this is part of a more general ID system, they probably want to avoid that people duplicate or expor…

At least that establishes that you don't care about civil rights :|

Nope, it is my system currently. I hope we won't go back to GDR where the government needed to approve eachtypewriter.

You forgot to mention the additional remote attestation shackles you put on that trenchcoat. Note that I - as opposed to the posts parent - used an official trusted CA as an exampl…