Does anyone have a decent architectural overview of iPhone (6)? Security - these enclaves etc sound good but devil is in the details
A Message to Our Customers
141–150 of 1001 posts
Re: A Message to Our Customers
#142Earlier quoted context omitted.
But you can always root your phone and install Cyanogenmod from scratch, right? Agreed that this is not too trivial right now because of standardization issues, but it could be done if you really care about privacy.
Not all of CyanogenMod is free software (you still have a bunch of binary blobs, and everyone has to use Google Play Services anyway because every app seems to implicitly require it). Replicant would be a much better alternative if it actually supported anything newer than 2G.
> and everyone has to use Google Play Services anyway
This isn't true. You can stick to app repositories like F-Droid and use Raccoon to download Play Store apps via your desktop without using a Google account on your phone.
Re: A Message to Our Customers
#143Earlier quoted context omitted.
I know that it is an idiom, I asking why he has no hope
From the link that was posted in reply to you, 'hope against hope' means 'to have hope even when the situation appears to be hopeless'. Which means he does have hope, even though the situation appears to be hopeless.
Yeees, I'm asking why he thinks there is little hope that they will stand
Re: A Message to Our Customers
#144Huge props to Apple - here's hoping against hope that Google, Facebook, and Amazon get behind this. One thing I was wondering is how Apple is even able to create a backdoor. It is explained toward the end: "The government would have us remove security features and add new capabilities to the operating system, allowing a passcode to be input electronically. This would make it easier to unlock an iPhone by “brute force…
Absolutely. I'm quite amazed they had the guts to go through with this and I applaud it. I will support them with my dollars as much as possible.
Re: A Message to Our Customers
#145Earlier quoted context omitted.
I know that it is an idiom, I asking why he has no hope
From the link that was posted in reply to you, 'hope against hope' means 'to have hope even when the situation appears to be hopeless'. Which means he does have hope, even though the situation appears to be hopeless.
I think Oletros understands that perfectly, but is wondering why OP feels that the situation appears to be hopeless.
Re: A Message to Our Customers
#146Re: A Message to Our Customers
#147Earlier quoted context omitted.
Ok, so: "The UID allows data to be cryptographically tied to a particular device. For example, the key hierarchy protecting the file system includes the UID, so if the memory chips are physically moved from one device to another, the files are inaccessible. The UID is not related to any other identifier on the device." The secure enclave must still give it's UID under some circumstances? This still does not appear to…
Where is the reply button under your comment chillaxtian? Edit: hmm, now it suddenly appeared... How about disabling the wipe signal by cutting some interconnects in the silicon? Is the function by which the AES keys are calculated from the password really completely inaccessible?
If you are doubting the documents, then exactly what evidence will persuade you? Sounds like your mind is already made up.
Re: A Message to Our Customers
#148Earlier quoted context omitted.
Nobody builds their Android from source. Nobody uses Cyanogenmod. And nobody runs Android on a phone where the entire stack is open source and blob free. Anyone who does is a rounding error.
> And nobody runs Android on a phone where the entire stack is open source and blob free. > Anyone who does is a rounding error. I'm actually curious if there is literally anyone who uses no proprietary software, including the radios and the SoC, on their Android device. My bet is that there's not even a single device out there for which this is possible. (If there is, I'd love to see it.)
What's the closest one can reasonably get?
Re: A Message to Our Customers
#149Earlier quoted context omitted.
Nobody builds their Android from source. Nobody uses Cyanogenmod. And nobody runs Android on a phone where the entire stack is open source and blob free. Anyone who does is a rounding error.
> And nobody runs Android on a phone where the entire stack is open source and blob free. > Anyone who does is a rounding error. I'm actually curious if there is literally anyone who uses no proprietary software, including the radios and the SoC, on their Android device. My bet is that there's not even a single device out there for which this is possible. (If there is, I'd love to see it.)
Not quite, but you can come close. I have Cyanogen installed on all my Android devices and I try to use as little proprietary software as possible. However I am patiently waiting for the Neo900, which is a free (libre) hardware design based on the Nokia N900: https://neo900.org/
According to them, there are unfortunately no baseband modems on the market that can legally have their firmware distributed as free software. Their workaround is to keep the modem as isolated from the CPU/RAM as possible.
Re: A Message to Our Customers
#150What I think Apple should (also?) do is appeal to both the law enforcement themselves, and the government - basically go "All secret communications from law enforcement and government figures - up to the President - would be at risk", or something to that effect.
I doubt the ones giving these orders would be comfortable with their own privacy being at risk.