Hacker News
Motorola Signature 27 with GrapheneOS support
utopiah
|next
[-]
No doubt it's a way WAY better device, really, but I don't see where I would actually need that. I happily toss the one I have around and don't even care if it gets stolen or lost one day, different preference.
glenstein
|root
|parent
[-]
smithbob
|next
|previous
[-]
throwaway_9438u
|root
|parent
|next
[-]
jrexilius
|root
|parent
|next
|previous
[-]
ysnp
|root
|parent
|next
[-]
Baseband firmware/processors are still making strides in terms of defending against attacks so I don't think we are at the point where backdoors are needed. More likely that undocumented AT commands, plausibly deniable bugdoors and existing memory corruption vulnerabilities are already convenient reality. However, part of that reality is also that once the cellular modem is exploited OTA it is still a massive task to traverse IOMMU restrictions and get device owner data/secrets from the userspace OS. It doesn't even grant visibility into application traffic which has been aggressively TLS encrypted since the mid 2010s.
abdullahkhalids
|root
|parent
|next
|previous
[-]
Obviously since phone calls and text messages are unencrypted the baseband chip could send them elsewhere. But your internet communication should already be encrypted before it hits the baseband chip. So is the threat model Motorola has intentionally introduced a backdoor to leak data from the main chip to the baseband chip?
eigenspace
|root
|parent
|next
|previous
[-]
I'm pretty uncomfortable with how many smartphones I'd like to buy end up being Chinese owned companies. I wish Fairphone had a better camera, if it did, I'd just buy one of those and call it day.
ysnp
|root
|parent
|next
[-]
Independence from the Chinese manufacturing hegemony probably means opting for a flagship Samsung, 11-series Pixel or pre-2025 Sony flagship.
joshkojoras
|root
|parent
|next
|previous
[-]
rootusrootus
|root
|parent
[-]
boterock
|root
|parent
|next
|previous
[-]
From a latin american POV, it is same-ish as USA manufacturers, they're also tracking everything we do to sell us more unneeded stuff.
The difference is that chinese government is just trying to sell stuff, while USA government is trying to convert all the southern continent into a colony to impose governments and suck up minerals in the meantime. If you ask me if I trust more China or USA, at least China's intentions are clear and direct.
Of course, you people will always have the argument of "national interest" which for us (at least tech-literate people) that's no argument, but still you will find some bootlickers in the mobs.
glenstein
|root
|parent
|next
[-]
That part is assumed, and the whole argument unravels once its established that the assumption doesn't hold. And then either the tankies show up, or everyone forgets about it until the next thread where the process plays out again.
jazzyjackson
|root
|parent
|previous
[-]
What non Chinese manufacture are you looking at? I liked Xperia I for being made in Japan but it’s still Chinese components underneath and as you say there’s no control of all the code.
There’s always Bunnie’s Precursor phone if anyone is interested in commercially developing something reasonably secure and auditable.
glenstein
|root
|parent
|next
[-]
I also think it's easy to underestimate your footprint when it comes to ecosystems that involve money in any capacity. No Amazon, Steam, no card information on a Netflix app, no signing in to Google to read a NYT article.
I think either you care about these things categorically or you don't, and I don't think anybody is going to be in the middle space you seem to be envisioning, which is concerned enough about the risks to avoid all banking but still a casual enough attitude about a compromised phone that you're fine with it for uses you consider non-secure.
manofmanysmiles
|root
|parent
|previous
[-]
At the same time, the state has its flaws and I'm questioning whether a top down system can ever really work, not out of some kind of "fuck the man" point of view, but more of an engineering and systems design perspective. If the system is perfectly factored, there are no cross-cutting concerns. But in such a system there is no need to communicate or coordinate laterally, only up and down. This sounds very lonely.
And if this system has a flaw, not a specific flaw, but rather a flaw in the assumption that tree structures with abstraction are a good way to organize systems, it might be impossible to change from let's say a tree with a single root to multiple interacting trees, with multiple roots of authority. Or maybe this is possible if people can learn to exist in multiple seemingly incompatible realities simultaneously?
ada-h00k
|next
|previous
[-]
collabs
|next
|previous
[-]
cromka
|next
|previous
[-]
y-c-o-m-b
|next
|previous
[-]
nsvd2
|next
|previous
[-]
passive
|next
|previous
[-]
welljh
|next
|previous
[-]
Medhurst went on Twitter to heavily promote GrapheneOS and was going to write a book about phone security for journalists.
Since August 24 he has disappeared completely. So maybe give us an update here on what really happened or call it DisappearOS in one interpretation or HoneypotOS in the other interpretation. Something is very wrong here.
prophesi
|root
|parent
[-]
And with your logic, you would also need to say that QubesOS / Whonix / Tails are all Disappear/Honeypot operating systems since he's known to run those as well. It's much more likely that the disappearance is due to the fact that his adversaries are very powerful state actors and it takes just one slip up in your OpSec for them to pwn you.
jazzyjackson
|root
|parent
[-]
Graphene being pwned is not mutually exclusive with authorities targeting individuals for using a phone marketed toward people who don’t want to be pwned
prophesi
|root
|parent
[-]
kevincox
|next
|previous
[-]
bens74
|next
|previous
[-]
I've used Apple devices my whole life and am just getting so so tired of the constant squeeze! Recently I decided enough is enough and started replacing devices. So far Framework+Linux instead of Macbook and HTPC+Linux instead of Apple TV. I've agonized a lot about what to do with the phone (the one company I hate more than Apple is Google!) While GrapheneOS project looks nice, it only works on Google phones, is still Android based, the open source Android ecosystem does seem like it's getting progressively squeezed by Google, and certain things (Android Auto, tap to pay, certain apps) won't work without Google components. None of this makes me happy, but with a non-Google phone option it might just make sense.
mapierce2
|next
|previous
[-]
… "an privacy" …
A confidence-inspiring typo, unless there is a novel way of pronouncing "privacy" that I'm unaware of.
dazhbog
|next
|previous
[-]
warrantisall
|next
|previous
[-]
Onavo
|next
|previous
[-]
jauntywundrkind
|next
|previous
[-]
One of the most exciting things is that GrapheneOS folks insist the bootloader not be locked. I continue to think actual Linux on the phone is kind of just waiting for us, that it'd be imminently possible. If we had some modern-ish devices with unlocked bootloaders. Especially if they are Qualcomm chipsets, which have been seeing a lot more linux upstreaming/mainlining support than any other ARM platform. https://news.ycombinator.com/item?id=49361686