141–150 of 349 posts
Earlier quoted context omitted.
I don't think the hardware will change much in the future anymore.
What about the backlight bug? https://wiki.pine64.org/wiki/PinePhone_v1.2#Backlight
Earlier quoted context omitted.
Just curious: which shells do you mean?
On my specific case I just use language REPLs like: - ProtoShade - Pydroid If you mean a classical shell, I guess something like Another Term might do.
They write in the description:
- Full-featured Terminal Emulator, with a readline support (available in pip).
- Built-in C, C++ and even Fortran compiler designed specially for Pydroid 3. It lets Pydroid 3 build any library from pip, even if it is using native code. You can also build & install dependencies from a command line.
So when SElinux comes to Android this app will be broken, too.
Earlier quoted context omitted.
Not exactly, it doesn't use "java frameworks". I don't exactly remember Implementation details (has been few years since I fiddled with it). It executes binaries same way as any app can do, there may be some JNI involved in the way you get to shell, but that's it. And what's wrong with it? It may be implementation detail but termux increases utility of the phone. It seems you always have an axe against UNIX / FOSS ec…
I surely have, because it killed desktop inovation, as everyone keeps trying to replicate PDP-11 CLI experience, as termux is a living proof of it. UNIX compatibility is also what keeps C alive, actually. Want a CLI? The Java APIs on Android provide all the required features.
TL;DR: Android is trying to enforce all data being either writable, or executable, never both. iOS already does this. There are big security benefits (it becomes much harder to exploit an app). A disadvantage is it becomes much harder to make things like terminal emulators and things that want to download random code and run it. But those are by far the minority of apps, and it seems crazy to make a pretty massive se…
>But those are by far the minority of apps, and it seems crazy to make a pretty massive security tradeoff for something that 99% of apps don't need to do. It also completely eliminates general purpose computing. >One solution might be a special permission to be allowed to do that, but it seems unlikely a user could really make an informed decision. I think the way "Developer Mode" on Android is implemented is pretty…
> I think the way "Developer Mode" on Android is implemented is pretty good.
Assuming you meant Chrome OS here, I disagree. Developer mode sucks because it forces you to forego almost all system security and it makes it trivial to compromise your data. There needs to be a middle ground, not just dev mode.
In my opinion there's a similar situation happening with SIP on Mac OS -- it's too drastic to disable, but there's in many cases not enough control to leave it enabled.
Nobody should need to enable dev mode or disable SIP just to run their favorite apps.
Quick note: Google's Advanced Protection program disallows sideloading apps, so you can't install F-droid. Edit: Note that the Advanced Protection program is opt-in for users that require the highest degree of security Google can offer. Regular users won't be impacted by this. Edit: proof https://imgur.com/a/yktPNIc Edit 2: see @haunter's comment for a link to the change announcement
I learned recently that having Advanced Protection enabled also rewrites all URLs in your email messages to use the Google URL redirector, even when accessed via IMAP. It breaks PGP signatures, among other things. No way to turn it off without disabling all of Advanced Protection. Sweet, huh?
Earlier quoted context omitted.
Who said anything about loading remote Java code? And yes you need to install application extensions via the store, so what?
> And yes you need to install application extensions via the store, so what? Writing your own code and executing that is explicitly forbidden. Be it REPLs or compiler suites. That too would have to go through the store. Only interpreters are allowed. The other issue is obviously that you can’t have an extension developed by person A for an app developed by person B. It’s very common to see mods, plugins, addons whate…
Just use Android IPC mechanisms instead of trying to copy UNIX patterns.
Earlier quoted context omitted.
I don't think the hardware will change much in the future anymore.
Not for this first Pinephone. But there is now a more advanced chip available that Pine64 may start offering within a couple of years.
Earlier quoted context omitted.
On my specific case I just use language REPLs like: - ProtoShade - Pydroid If you mean a classical shell, I guess something like Another Term might do.
Correct me, but pydroid looks like it is a native python interpreter very much like what termux has to offer. They write in the description: - Full-featured Terminal Emulator, with a readline support (available in pip). - Built-in C, C++ and even Fortran compiler designed specially for Pydroid 3. It lets Pydroid 3 build any library from pip, even if it is using native code. You can also build & install dependencies f…
Earlier quoted context omitted.
I surely have, because it killed desktop inovation, as everyone keeps trying to replicate PDP-11 CLI experience, as termux is a living proof of it. UNIX compatibility is also what keeps C alive, actually. Want a CLI? The Java APIs on Android provide all the required features.
Currently my most commonly used tool in Termux is youtube-dl from pip. Please point to how you can install it via these other Java based shells or language REPLs. Termux provides a lot more functionality than an interpreter.
Do you also want me to teach you Android Java or Kotlin?
Earlier quoted context omitted.
My personal security metric is "how many bitcoins would I leave in a wallet app on this phone". Currently that number is about 1 ($30k) on an up to date android. I believe that if I had more bitcoins on a phone, and told people about it, there's a good chance a targeted exploit would steal those keys. Even if I had them encrypted, at some point I have to type a password in to decrypt, and that would be the point they…
What is so wrong with Android that you trust it 10x less than iOS? What attacks are possible on Android that aren't possible on iOS? There are also trivial ways to root ancient iOS versions with a web browser, too. In fact, I think that technique was more common among iOS devices than it ever was among Android...
* Lack of things like w^x enforced across the OS. (the root of this post).
* The quality of SoC and OEM provided drivers being very very poor - there are lots of kernel exploits to be found.
* Very slow/no updates. Time from an exploit being reported to Google to it being patched by a typical user is usually 6 months or more. That means for any random device you find on the street, there is probably a viable exploit buyable on the black market.
* Less strict review process on apps - means there is more dodgy code with access to /dev/exploitabledevice...