Don’t get too excited. It only runs on a thirty plus year old HP110+ laptop. The chip was specifically designed for it.
The laptop has a black on green display like an old calculator, you can’t use it in the dark.
I just changed the batteries for it too. It take three Cyclon 2Volt sealed lead rechargables. (D-size with solderable tips.)
First, let me say that Daniel is a truly gifted security focused developer, and that I have used GrapheneOS before - it’s excellent for security, however, it is still android. His ever improving hardened malloc implementation is also very nice.
That said, if I were to build android for my L5, I’d use GrapheneOS.
The real issue here is that he seems triggered for some reason by semantics when he fails to see the L5’s potential, even for his own project. Google etc don’t ship firmware source for their phone SoC and basebands, either. At best you may get some leaked source code for them.
The component level firmware and security updates can later be added through LVFS/fwupd, if I’m not mistaken…this will bring parity with the botnet devices while also giving us the benefit of the killswitches (and real linux if you don’t build android yourself).
One also has to consider what they expect the L5 to be - another cell phone, or is it a full fledged linux machine that is also able to make calls…I see it as the latter.
There is nothing at all wrong with using GrapheneOS on whatever Smartphone you might get, but so long as the wifi chip is on,it can be pinged to your location whatever the software might be and so long as you see the 3G, 4G or LTE logo and the bars that other chip that broadcasts the signal to the local cell towers still tells anybody who wants to search you out as to where you are.
Data may be safe in GrapheneOS, but you can be tracked like a shark, whale or a bird who has been tagged. Your every move is known, how frequently you went to a local mall or a girlfriend’s flat can be catalogued. That is some security!
If I were a woman, or maybe even a man with a stalker, I would be quite satisfied? Not!
I wouldn’t be so confident about data safety when you have blackbox cpu (baseband) sharing your memory - any keys could be read, any data buffers, anything.
Data isn’t even safe. The baseband modem has DMA to the system memory, can even write to it to inject malicious code. No secure malloc function can fix that, since the first target is going to be the secure malloc function itself.
In practice, as long as the number of users are low, it may be the case that no one targets this particular version of android, since the payout isn’t worth the effort. On the other hand, people who choose to try to hide what they are doing are automatically of interest to certain groups for whom profit is not a motive and costs are not their own.
I can only like a post once, so accept the like on this post as a second like for how much I love that Promise Delivery Chart you posted.
Yeah, I think he’s just been through so much shittyness that he struck first as a protective move expecting some shittyness from Purism. Like I said, it’s just sad to see because I haven’t seen anything but Purism wanting to cooperate with other projects with like values. Personally, I can forgive him for the misdirected harmful comments because I myself have been there (not with a tech project but I’m embarrassed to say I’ve had issues with misandry. I just hope he realises not every similar project is out to get him a hell of a lot quicker than it took me to realise not every man is out to get me.)
Are you sure he is talking about Purism/Librem 5 in those tweets? As far as I can see the tweets do not say that explicitly, it’s something we’re supposed to read between the lines?
At some point he reveals the L5 as an object of discussion. One may reasonably assume that prior comments, were they to be rationally linked, were associated with the L5 as well. My favorite part of the infosec industry is how, to really emphasize a point, emotion will be brought into the narrative. For that extra oomph! The real discussion here is normative vs positive. And if it’s positive, is quarantining the ARM SoC as Purism essentially did the right strategy? A fantastic debate undermined by lack of argumentative and emotional discipline. Examples are:
That being said, we can find some items in here that I think really merit exploration:
My goodness though, what a tantrum.
If the choice was
I’d always choose the latter.
It is misleading to say that a lack of updates via OS mechanisms is a lack of freedom. You are free to update the components, although it might be inconvenient.
It’s the case already for the coreboot update script.
Besides, Purism is in discussion with the FSF about this.
Sandboxing
A lot of the criticism has no base.
The rest can be summarized with
“OMG, they are not perfect on day one, how dare they1!1!!!11!!!”
Full security updates while online and only while online are bad. Take the ryzenfall security issues. I am reasonably confident that AMD is not sticking bad things in their firmware, intentionally (board manufacturers is another matter…). But if your computer gets compromised by a rootkit, you must replace the motherboard. Why? Because you have no way to verify that the UEFI has not been compromised. I mean, if you have a flash reader/writer, you can verify it, if you have what the original image is supposed to be, or reflash it while you’ve got it hooked up. I’d far rather the UEFI be out of reach of the running system. A
As a good compromise, a write-protect (physical) switch would be ideal. Lets you modify the component in place, but only when you want to.
Thank you. That’s a damn good idea.
That would be awesome.
I like how some people want to reach a distant goal by not even starting to move in the right direction. Waiting for the invention of teleportation? Good luck with that.
That seems like a great laptop to have. If I get enough money then I might buy one.
Or, as the Chinese say,
A journey of a thousand miles begins with a single step
That would be something which we actually had in the past. I have very distinct memories of seeing a BIOS write-enable jumper on motherboards.
@lperkins2 You reminded of an idea for a Purism product that I wish for.
I wish there was a USB key to store boot firmware that had a physical switch that prevented writes. All the ones that I have found are a soft-disable. The key just tells the OS “please do not write to me”. Writes can still happen anyway.
The Chinese use miles?
What a load of hyperbolic nonsense.
I swear some people are just paid agitators on these forums. I guess Google and Apple are mad.