441–450 of 467 posts
Earlier quoted context omitted.
or you could slap a GSM shield on a Raspberry Pi.
As I wrote: that's a MVP, not something you can sell to anyone less nerdy than Richard Stallman, and it's based off of the work of a lot of the people I just spent 58 minutes to think of and write down.
Earlier quoted context omitted.
[flagged]
Source:
https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d...
Earlier quoted context omitted.
Source:
The source is Apple. They can access any phone if they want to. In this case, they didn't want to. https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d...
Earlier quoted context omitted.
Hardware relying on free drivers is almost non-existent in the mobile world. There is nothing to choose from, obviously.
Then aim for freely distributable drivers. You can share copies of Raspbian, so it seems possible.
Earlier quoted context omitted.
As I wrote: that's a MVP, not something you can sell to anyone less nerdy than Richard Stallman, and it's based off of the work of a lot of the people I just spent 58 minutes to think of and write down.
Then you can copy the relevant parts of the designs from both boards onto one smaller board.
That's my entire point. It's not easy to design a complex thing such as a smartphone.
Earlier quoted context omitted.
The source is Apple. They can access any phone if they want to. In this case, they didn't want to. https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d...
I don't see anything written there that says Apple has a current capability to "access any phone" which I am assuming to mean personal info like SMS message contents... just a whole lot of reasoning why they haven't had that capability in years.
Earlier quoted context omitted.
A company buys laptops for its employees and they get shipped from outside the US, and before they get delivered nice changes have been made. Any specific individual that is high value will walk into a store and buy from stock.
Ok and buys the laptop with malware? How the customs knows that high value target will buy that specific laptop they swapped the ssd? And what they do exactly? Put malware to steal his data?
Earlier quoted context omitted.
I wonder if a real OEM supports graphene if that would solve device attestation for things like banking apps.
Non-Google attestation is still a bad thing. I'd much rather GrapheneOS continue to get popular enough that banking apps are forced to support phones without attestation.
Now developers can choose to support it (and some of the developers do!) aside or apart of google "attestation". How it should be, reliable providers should be able to certify it equally firmly.
Google should be forced to accept a valid hardware-attestation certification as their own. GOS have raise the issue with the European Commission and I hope Google will get fined and forced.
in quotes because it mostly confirms that google runs in the privileged mode and can't detect one of the issues. But google also gives a pass to many very old, insecure, rooted devices. It's a scam.
Earlier quoted context omitted.
Non-Google attestation is still a bad thing. I'd much rather GrapheneOS continue to get popular enough that banking apps are forced to support phones without attestation.
Will never happen. Banks will not support this unless insurance companies include that. And that will never happen because they will never support something that a large company doesn't committ to.
Earlier quoted context omitted.
I wonder if a real OEM supports graphene if that would solve device attestation for things like banking apps.
I'm writing this on a grapheneos pixel 5. I have the app for very-large-USbank and a few others. With 'exploit protection compatibility toggle' enabled they works fine. In what regard this applies to device attestation I couldn't say.