191–200 of 237 posts
And yes this nonencrypted shit is totally insecure
While the never fixed 0days on android are completely secure. And let's not forget the several noclick attacks that can root your iphone with a message :)
Have you checked what it takes to achieve those 0-click root exploits on iOS or Android compared to a desktop Linux distro?
Not even in the same league.
I run an older Android phone without a Google account. All apps are from F-Droid. Google services are all turned off. Mail is Thunderbird, browser is Fennec. Is it still possible to initialize an Android phone without a Google account?
You can even sandbox some Google services to get things like maps working.
There is no longer a _need_ for a mobile platform like there was years ago. I would love to run any software I want on my phone.
Problem is these days, "first to market" mentality ships software with a lot of bloat and it is tolerable bc PCs are very powerful. So as phones got more powerful, software got more bloaty.
Earlier quoted context omitted.
Note that the initramfs is stored without encryption or signing. So while your data won't be leaked when your phone gets stolen, it should be considered compromised if you get it back.
Sure, lack of secure boot is a tradeoff. Of course, by the same token you can just reflash the boot partition and fix that.
I think if the bootloader is overwritable, it could lie to you about reflashing the boot partition...
Earlier quoted context omitted.
Pretty sure Fedora, being based on Red Hat, has the strongest SELinux policy in place by default, and SELinux is pretty much the best sandboxing option available other than actual virtualization.
Yes, but this was about Silverblue and how it implements some additional sandboxing, which it doesn't. SELinux is great, but maintaining it and creating configs is huge amount of work and where on AOSP, every process is strictly confined with SELinux, on Fedora, not so much. Not to mention the additional software the user installs. Not at all comparable to real Android or iOS sandboxing.
Anyone using PostmarketOS on a phone? And I mean as a daily driver, with no other phone. I have been following it for years and would like to switch someday, but that moment hasn't happened yet. Currently I use Sailfish from Jolla on a Sony phone. For a linux phone, it serves my needs. I would be open to change.
Anyone tried Linux phones for daily use? Not those Android ones, but real Linux. Just wondering how it works in real life compared to Android/iOS?
Earlier quoted context omitted.
For me personally at least a few aspects about this are efficiency and control: The number of CPU cycles my current android phone burns through just to boot and get ready to accept my "first useful input" is probably in the same order of magnitude as or higher than my old N900 would use for the entire day (600MHz single core vs. 8 cores at several GHz). Yet somehow the N900 could easily run quite a lot of things in p…
All the Linux phones that i‘ve used have felt very sluggish, even if they were pretty recent models. GrapheneOS on the other hand is very snappy.
_ No GNU/Linux user ever
Please take my freedom in exchange for snappiness and security.
_ (a)NO(ther) GNU/Linux user
Users have the right to a secure deGoogled Android Linux after they give Google hundreds of dollars for a Pixel. _ Stickard G. Pallman
I have heard good things about GrapheneOS
GrapheneOS is riding on decades of Google-funded development and is thus pretty great. Linux phone development never had that kind of funding but we are getting there slowly but assuredly through user funded development and community involvement.
Earlier quoted context omitted.
i feel you, but these downsides have nothing to do with a linux phone, but with your friends privacy preferences. i am trying to be like that friend, except that i keep more communications channels open. i mean, verifying contacts face to face is one thing, but then we ought to at least have one unverified channel to arrange a meeting or a video chat. also there are more safe options, like deltachat that don't depend…
> but with your friends privacy preferences. Network effects and human nature combines to make this a completely insurmountable obstacle. You'll likely never convince even a sizable minority of your own friends & family to do tech things the hard way because you think it's more private that way. That is the argument in favour of being a bit more mainstream - you get to interface with the rest of humanity with much le…