News for hackers. Stuff that matters.

A comment on Show HN: Kryptonite – a new home for your SSH private key. Parent comment

Re:Show HN: Kryptonite – a new home for your SSH private key by jancsika on Tuesday May 02, 2017 @12:09PM (#14247610)
> While working on Replicant, a fully free/libre version of Android, we discovered that the proprietary program running on the applications processor in charge of handling the communication protocol with the modem actually implements a backdoor that lets the modem perform remote file I/O operations on the file system.

Are there cases where a similar situation has been described with a USB 1.1 audio device using an open source driver? Or any other class of USB device used by tens of millions of people?

[ Parent | on HN ]
Re:Show HN: Kryptonite – a new home for your SSH private key by tptacek on Tuesday May 02, 2017 @12:12PM (#14247640)
You have to be very specific about what Android phones you're talking about, and I'm the wrong person to debate Android security with. I have friends who work on Android platform security and I am very hesitant to cast aspersions on the Android security effort as a whole. But my advice for people who really care about security is: get an iPhone.
[ Parent | on HN ]